# Cloud Native Ecosystem Published articles for Cloud Native Ecosystem. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Kubernetes v1.37 brings 67 enhancements. Which matter for operators? DevFeed: [Kubernetes v1.37 brings 67 enhancements. Which matter for operators?]() Original publisher: [Read original article]() Author: Bill Doerrfeld Published: 2026-09-11T17:40:04Z Content type: news Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack](), [The New Stack]() Topics: [Kubernetes](), [Infrastructure as code](), [migration](), [AI Platform](), [Machine learning](), [Authorization]() Tags: [ai](), [ai-infrastructure](), [cloud-native-ecosystem](), [hpe](), [infrastructure-as-code](), [kubecon-cloudnativecon-na-2026](), [kubernetes](), [migration](), [post](), [road-to-kubecon](), [sponsor-hpe](), [sponsored-post](), [terraform]() ### AI overview A Kubernetes roundup covers v1.37 enhancements, HPE Morpheus and Terraform provider changes, migration tooling, and recent CNCF project graduations including Kubeflow. ### Source excerpt Welcome to the first edition of Road to KubeCon, where we'll track the world of Kubernetes as we approach KubeCon The post Kubernetes v1.37 brings 67 enhancements. Which matter for operators? appeared first on The New Stack. ## CNCF Welcomes New Silver Members as Enterprises Scale AI From Training to Inference DevFeed: [CNCF Welcomes New Silver Members as Enterprises Scale AI From Training to Inference]() Original publisher: [Read original article]() Author: Haley White Published: 2026-09-08T01:58:47Z Content type: news Language: en Sources: [Cloud Native Computing Foundation]() Topics: [Cloud Native Ecosystem](), [Inference](), [AI Platform](), [Optimization](), [Kubernetes]() Tags: [ai](), [ai-infrastructure](), [announcements](), [cloud-native-ecosystem](), [inference](), [kubernetes](), [optimization](), [production](), [training]() ### AI overview CNCF announces nine new Silver members as enterprises shift AI workloads from training to production inference. The announcement emphasizes cloud-native infrastructure, operational efficiency, data sovereignty, and resource optimization. ### Source excerpt New members including SoftBank Corp. and Crusoe join the cloud native community to help build cost-efficient, sovereign infrastructure SHANGHAI, China - KubeCon + CloudNativeCon + OpenInfra Summit + PyTorch Conference China 2026 - September 8, 2026... ## CNCF and SlashData Report Highlights China's Cloud Native Momentum as AI Moves to Inference DevFeed: [CNCF and SlashData Report Highlights China's Cloud Native Momentum as AI Moves to Inference]() Original publisher: [Read original article]() Author: Haley White Published: 2026-09-08T01:50:55Z Content type: news Language: en Sources: [Cloud Native Computing Foundation]() Topics: [Cloud Native Ecosystem](), [Inference](), [AI Platform](), [model-deployment](), [distributed-systems](), [Back end]() Tags: [ai](), [ai-infrastructure](), [announcements](), [backend](), [china](), [cloud](), [cloud-native-ecosystem](), [developers](), [distributed-systems](), [inference](), [production](), [research]() ### AI overview CNCF and SlashData report that cloud native adoption in China is growing, including among IIoT and younger backend developers. The research describes cloud native infrastructure as supporting AI teams' transition from experimentation and training to production serving and distributed inference. ### Source excerpt New research finds China's IIoT developers (48%) outpace the global average (42%) in cloud native adoption as AI infrastructure matures Key Highlights: SHANGHAI - KubeCon + CloudNativeCon + OpenInfra Summit + PyTorch Conference China --Sept. 8,... ## Critical Kyverno Vulnerability -- CVE-2026-54523 DevFeed: [Critical Kyverno Vulnerability -- CVE-2026-54523]() Original publisher: [Read original article]() Author: Anubhav Sharma Published: 2026-07-29T01:08:41Z Content type: news Language: en Sources: [Nirmata]() Topics: [Kyverno](), [vulnerability](), [Exploit](), [Kubernetes](), [Cloud Native Ecosystem]() Tags: [2026](), [admission-controller](), [ai](), [cloud-native](), [cloud-native-ecosystem](), [cncf](), [cve](), [devsecops](), [engineering](), [kubernetes](), [kyverno](), [nctl-ai](), [platform-engineering](), [policy](), [policy-as-code](), [policy-management](), [release](), [upgrade](), [vulnerability]() ### AI overview The article reports CVE-2026-54523, a critical Kyverno vulnerability affecting versions 1.18.0 and 1.18.1. A tenant able to create a NamespacedMutatingPolicy could bypass namespace isolation and generate resources in other namespaces, potentially enabling cluster-wide privilege escalation. Kyverno 1.18.2 patches the vulnerability. ### Source excerpt Critical Kyverno Vulnerability -- CVE-2026-54523 On July 13, 2026, a critical vulnerability was disclosed in Kyverno, the Kubernetes-native policy engine used broadly across the cloud native ecosystem for policy-as-code enforcement. The vulnerability, tracked as CVE-2026-54523 (GHSA-79gf-7frw-68m9), allows a tenant with permission to create a NamespacedMutatingPolicy... The post Critical Kyverno Vulnerability -- CVE-2026-54523 first appeared on Nirmata. ## Cloud native application challenges: installing the walking skeleton DevFeed: [Cloud native application challenges: installing the walking skeleton]() Original publisher: [Read original article]() Author: Manning Book Authors Published: 2026-05-13T13:00:00Z Content type: tutorial Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Kubernetes](), [YAML](), [Containers](), [Platform Engineering]() Tags: [applications](), [article](), [chronosphere](), [cloud-native-ecosystem](), [configuration](), [container](), [engineering](), [environment-variables](), [kubernetes](), [platform](), [platform-engineering](), [post-contributed](), [secrets](), [sponsor-chronosphere](), [sponsored-post-contributed](), [yaml]() ### AI overview This excerpt from Platform Engineering on Kubernetes explains how Kubernetes YAML defines and configures containerized applications. It introduces Deployments, Services, Ingress, and ConfigMaps or secrets, including their roles in replication, traffic routing, service discovery, and configuration management. ### Source excerpt Editor's note: This article is an excerpt from Chapter 1 of the Manning book, Platform Engineering on Kubernetes. This excerpt The post Cloud native application challenges: installing the walking skeleton appeared first on The New Stack. ## Why Prometheus couldn't see Cilium metrics at 2 a.m. DevFeed: [Why Prometheus couldn't see Cilium metrics at 2 a.m.]() Original publisher: [Read original article]() Author: Rishi Mondal Published: 2026-05-10T14:00:00Z Content type: article Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Prometheus](), [Cilium](), [Grafana](), [Kubernetes](), [Cloud Native Ecosystem](), [Monitoring]() Tags: [cilium](), [cloud-native-ecosystem](), [cncf](), [grafana](), [kubernetes](), [monitoring](), [network](), [networking](), [platform-engineering](), [post-contributed](), [prometheus](), [sponsor-cncf](), [sponsored-post-contributed](), [tls]() ### AI overview This article examines the integration tax that platform teams encounter when combining CNCF projects in production. It uses Prometheus and Cilium metrics as an example, and discusses integration failures involving Hubble, Grafana, cert-manager, ingress controllers, and cloud DNS configuration. ### Source excerpt I still remember the first time we lost sleep over something that wasn't a bug. It was a Tuesday. Grafana The post Why Prometheus couldn't see Cilium metrics at 2 a.m. appeared first on The New Stack. ## How Microsoft is governing thousands of Kubernetes clusters without manual intervention DevFeed: [How Microsoft is governing thousands of Kubernetes clusters without manual intervention]() Original publisher: [Read original article]() Author: Adrian Bridgwater Published: 2026-05-07T22:07:21Z Content type: article Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Kubernetes](), [Microsoft](), [GitOps](), [Artificial Intelligence](), [Inference](), [observability]() Tags: [ai](), [cloud-native-ecosystem](), [declarative](), [gitops](), [inference](), [kubecon-cloudnativecon-eu-2026](), [kubernetes](), [kubernetes-clusters](), [microsoft](), [observability](), [platform-engineering](), [podcast](), [post](), [sponsor-microsoft](), [sponsored-post](), [video]() ### AI overview The article examines how Microsoft addresses the operational challenges of governing thousands of Kubernetes clusters across on-premises, cloud, and edge environments. It describes limitations of single-cluster GitOps assumptions, including multi-cluster routing, secret synchronization, and unified observability, especially as distributed AI inference workloads increase. ### Source excerpt Kubernetes is complicated; everybody knows it. Logically enough, Kubernetes deployed as a cluster of collected and coalesced instances at "fleet The post How Microsoft is governing thousands of Kubernetes clusters without manual intervention appeared first on The New Stack. ## Kubernetes User Namespaces Improve Pod Isolation but Do Not Isolate the Shared Kernel DevFeed: [Kubernetes User Namespaces Improve Pod Isolation but Do Not Isolate the Shared Kernel]() Original publisher: [Read original article]() Author: Kaylin Trychon Published: 2026-05-06T14:50:05Z Content type: opinion Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Kubernetes](), [Security](), [Kernel](), [Cloud Native Ecosystem](), [Containers]() Tags: [cloud-native](), [cloud-native-ecosystem](), [containers](), [cves](), [edera](), [kubernetes](), [post-contributed](), [security](), [sponsor-edera](), [sponsored-post-contributed]() ### AI overview Kubernetes user namespaces can reduce the impact of some container escapes by remapping pod root identities to unprivileged host identities. The article argues that this improves isolation but does not address the security limitations of a shared kernel. ### Source excerpt Kubernetes shipped a long-awaited security feature last week: user namespace support for pods. It may sound like an obscure feature The post Kubernetes finally lands user namespace support, but shared kernel problem remains appeared first on The New Stack. ## Behind the Scenes: How Maintaining Cloud Native Buildpacks Powers Platforms Like Heroku DevFeed: [Behind the Scenes: How Maintaining Cloud Native Buildpacks Powers Platforms Like Heroku]() Original publisher: [Read original article]() Author: Juan Bustamante Published: 2026-03-17T15:00:03Z Content type: opinion Language: en Sources: [Heroku]() Topics: [Heroku](), [Maintainers](), [Cloud Native Ecosystem](), [Command-line interface](), [releases](), [Security](), [vulnerability](), [GitHub Actions](), [GitHub](), [GitHub Issues](), [Google Cloud Platform (GCP)](), [Docker]() Tags: [buildpacks](), [cli](), [cloud](), [cloud-infrastructure](), [cloud-native](), [cloud-native-ecosystem](), [docker](), [ecosystem](), [engineering](), [github](), [github-actions](), [github-issues](), [google-cloud](), [google-cloud-run](), [heroku](), [maintainers](), [maintenance](), [open-source](), [patches](), [platform](), [releases](), [security](), [vulnerability]() ### AI overview This article describes how pack CLI maintainers support Cloud Native Buildpacks through releases, security patches, issue triage, pull request reviews, CI changes, and feature development. It explains how Heroku-funded maintenance benefits Heroku, Google Cloud Run, and internal platform teams. ### Source excerpt Most developers never see the 11 pack releases we shipped in the last 14 months as pack CLI maintainers. That's actually a good sign--it means the infrastructure just works. When a critical vulnerability emerges requiring an immediate upgrade, the fix is shipped within days. Here's what most developers don't see: that same security patch now [...] The post Behind the Scenes: How Maintaining Cloud Native Buildpacks Powers Platforms Like Heroku appeared first on Heroku. ## Keycloak's Bug Bounty Program on YesWeHack DevFeed: [Keycloak's Bug Bounty Program on YesWeHack]() Original publisher: [Read original article]() Author: Alexander Schwartz Published: 2026-01-16T00:00:00Z Content type: news Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Bug Bounty](), [IAM](), [Cloud Native Ecosystem](), [Open Source]() Tags: [bug-bounty](), [cloud-native-ecosystem](), [eu](), [iam](), [idm](), [kerberos](), [keycloak](), [ldap](), [open-source](), [openid-connect](), [saml](), [sso]() ### AI overview Keycloak announces its public bug bounty program on YesWeHack as part of an EU-sponsored initiative. The program is currently paused while submissions are reviewed after receiving many submissions. ### Source excerpt As a Cloud Native Computing Foundation (CNCF) project, Keycloak is the open-source IAM backbone for countless applications. This is your chance to secure a core piece of the cloud-native ecosystem in this public bug bounty program!. We are proud to be part of this EU sponsored initiative. Projects like ours fuel a lot of public and private infrastructure in the EU and worldwide. Thank you for choosing our project for this initiative to help us to improve and provide secure services to our users! We received a lot of good submissions to the program. While we sort out the submissions, the program is paused. ## Guest Post: Resiliency by Design and the Importance of Internal Developer Platforms DevFeed: [Guest Post: Resiliency by Design and the Importance of Internal Developer Platforms]() Original publisher: [Read original article]() Published: 2025-08-21T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Platform Engineering](), [Cloud Native Ecosystem](), [Resilience](), [Orchestration](), [CI/CD](), [observability](), [Deployment](), [Security]() Tags: [assemble-2025](), [automotive-software-engineering](), [chainguard-containers](), [chainguard-images](), [ci-cd](), [cloud](), [cloud-native-ecosystem](), [disaster-recovery](), [git](), [idp](), [kubernetes](), [observability](), [platform-engineering](), [resilience](), [resiliency-by-design](), [security]() ### AI overview This article explains how internal developer platforms support resiliency by design. It argues that a well-designed platform can reduce the effects of cloud-native complexity by providing consistency, CI/CD integration, declarative infrastructure, observability, governance, and an orchestration layer across Git, Kubernetes, and cloud providers. It also describes standardized disaster recovery, failover, deployment, rollback, and security practices as platform capabilities. ### Source excerpt Gaurav Saxena, a Director of Engineering at an automotive company, talks through how internal developer platforms are an important part of resiliency by design. ## Recap from KubeCon + CloudNativeCon Europe 2024 DevFeed: [Recap from KubeCon + CloudNativeCon Europe 2024]() Original publisher: [Read original article]() Author: Thomas Darimont Published: 2024-04-15T00:00:00Z Content type: article Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Cloud Native Ecosystem](), [IAM](), [Kubernetes](), [OAuth 2.0](), [Passkeys](), [Open Policy Agent]() Tags: [cloud-native-ecosystem](), [iam](), [idm](), [kerberos](), [keycloak](), [kubecon](), [kubernetes](), [ldap](), [oauth2](), [open-policy-agent](), [openid](), [openid-connect](), [recap](), [saml](), [security](), [sso]() ### AI overview A recap of Keycloak's presence at KubeCon + CloudNativeCon Europe 2024, covering talks on OAuth2 Token Exchange for microservice API security, Keycloak's use in CERN's IAM infrastructure, federated IAM for Kubernetes with OpenFGA, and recent support for Passkeys, OAuth 2.1, and OpenID for Verifiable Credentials. ### Source excerpt After a packed week of fantastic talks at KubeCon + CloudNativeCon Europe 2024 in Paris, we're delighted to share our impressions with the rest of the Keycloak community. Keycloak and OAuth2 Token Exchange for Microservice API Security The presence of Keycloak in many presentations highlighted its importance in the cloud-native ecosystem. Notably, the talk "OAuth2 Token Exchange for Microservice API Security" by Ahmet Soormally & Letz Yaara on OAuth2 Token Exchange (RFC 8693) underscored its application in microservice security and pinpointed areas for Keycloak's enhancement. Efforts to advance the support for Token Exchange are underway, and community feedback is invaluable. Please join the discussion on the current usage of Token Exchange to help us out. Keycloak and the Secrets of the Universe at CERN A standout moment was learning about Keycloak's role at CERN in the talk "The Hard Life of Securing a Particle Accelerator", as shared by Antonio Nappi and Sebastian Lopienski, emphasizing its contribution to securing the particle accelerator's IAM infrastructure. Keycloak supports research on the nature of the universe. How cool is that :) Keycloak, OpenFGA, and Kubernetes Authorizer Jonathan Whitaker's talk "Federated IAM for Kubernetes with OpenFGA" on federated IAM with OpenFGA showcased innovative approaches for managing access to Kubernetes resources through the combination of Keycloak, OpenFGA and a custom Kubernetes Authorizer Web Hook. In particular, the demonstration of temporarily elevated access to Kubernetes resources was very well received. Keycloak: The Leading Edge of AuthN and AuthZ Last but not least, our session, "The Leading Edge of AuthN and AuthZ by Keycloak", presented by Takashi Norimatsu and Thomas Darimont, introduced the latest Keycloak advancements, including support for Passkeys, OAuth 2.1, and OpenID for Verifiable Credentials (OpenID4VC). As part of our talk, we showed the current support for Passkeys and some integration options with ## Spotlight on SIG CLI DevFeed: [Spotlight on SIG CLI]() Original publisher: [Read original article]() Author: The Kubernetes Authors Published: 2023-07-20T00:00:00Z Content type: article Language: en Sources: [Kubernetes Contributors Blog]() Topics: [Kubernetes](), [kubectl](), [Command-line interface](), [Tooling](), [interoperability](), [Cloud Native Ecosystem]() Tags: [cli](), [cloud-native-ecosystem](), [interoperability](), [kubectl](), [kubernetes](), [spotlight](), [tech-lead](), [tooling]() ### AI overview An interview with SIG CLI leaders describes the group's role in improving Kubernetes command-line tooling, including kubectl, and supporting contributors. It covers the group's goals, ongoing efforts, CLI libraries, and interoperability specifications for Kubernetes-related tooling. ### Source excerpt In the world of Kubernetes, managing containerized applications at scale requires powerful and efficient tools. The command-line interface (CLI) is an integral part of any developer or operator's toolkit, offering a convenient and flexible way to interact with a Kubernetes cluster. SIG CLI plays a crucial role in improving the Kubernetes CLI experience by focusing on the development and enhancement of kubectl, the primary command-line tool for Kubernetes. In this SIG CLI Spotlight, Arpit Agrawal, SIG ContribEx-Comms team member, talked with Katrina Verey , Tech Lead & Chair of SIG CLI,and Maciej Szulik , SIG CLI Batch Lead, about SIG CLI, current projects, challenges and how anyone can get involved. So, whether you are a seasoned Kubernetes enthusiast or just getting started, understanding the significance of SIG CLI will undoubtedly enhance your Kubernetes journey. Introductions Arpit: Could you tell us a bit about yourself, your role, and how you got involved in SIG CLI? Maciej: I'm one of the technical leads for SIG-CLI. I was working on Kubernetes in multiple areas since 2014, and in 2018 I got appointed a lead. Katrina: I've been working with Kubernetes as an end-user since 2016, but it was only in late 2019 that I discovered how well SIG CLI aligned with my experience from internal projects. I started regularly attending meetings and made a few small PRs, and by 2021 I was working more deeply with the Kustomize team specifically. Later that year, I was appointed to my current roles as subproject owner for Kustomize and KRM Functions, and as SIG CLI Tech Lead and Chair. About SIG CLI Arpit: Thank you! Could you share with us the purpose and goals of SIG CLI? Maciej: Our charter has the most detailed description, but in few words, we handle all CLI tooling that helps you manage your Kubernetes manifests and interact with your Kubernetes clusters. Arpit: I see. And how does SIG CLI work to promote best-practices for CLI development and usage in the cloud native e