Skip to content

Company

Cloud Native Computing Foundation

CNCF is a Linux Foundation project that hosts and governs open-source cloud-native projects, including Kubernetes, Helm, and OpenTelemetry.

Known aliases

  • Cloud Native Computing Foundation
  • CNCF
  • cncf.io

Current stories

buildOne report1 publisher

KEDA ties Metrics Server readiness to the gRPC link behind every HPA query

KEDA merged fix #8226 so its Metrics Server reports NotReady when its gRPC link to the keda-operator is down. Before the change, the pod could stay Ready while the HPA behind it stopped getting any scale signal.

Publishers:dev.to

Reality

Evidence55
Adoption
Not scored
Hype gap+5
Incentives35
Confidence55
productOne report1 publisher

OllyGarden's telemetry-cutting Rose agent now recommends what teams should instrument

OllyGarden's Rose AI agent now flags missing OpenTelemetry instrumentation, a feature added after the company raised a further $4 million. Since it now proposes additions as well as cuts, whoever pays the observability bill has to measure the net change.

Publishers:devops.com

Reality

Evidence30
Adoption
Not scored
Hype gap+30
Incentives70
Confidence35
buildConfirmed2 publishers

Prague summit report puts European groups at 15% of open-source governance

Linux Foundation Europe's Thierry Carrez said at the Open Source Summit in Prague that switching to open source alone will not end Europe's dependence. European groups supply 15% of governance participation, The Stack reported, so teams that switch adopt projects governed mostly from outside Europe.

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives55
Confidence50
productOne report1 publisher

CNCF's oversight committee moves Meshery to incubation after a 350% rise in commits

CNCF's oversight committee voted Meshery, a Kubernetes management plane with over 7,000 contributors, into incubation. For platform teams eyeing one plane for every mesh, the vote adds foundation oversight, though the evidence measures contributors more than production use.

Publishers:cncf.io

Reality

Evidence40
Adoption30
Hype gap+30
Incentives70
Confidence45
buildOne report1 publisher

Docsy moves to the Linux Foundation with experimental output built for AI agents

Google's Docsy theme, on about 2,200 projects by the end of 2024, is moving to the Linux Foundation while it adds output built for AI agents. Teams on the theme now decide, site by site, whether their docs also get published for machine readers.

Publishers:thenewstack.io

Reality

Evidence45
Adoption45
Hype gap+15
Incentives50
Confidence55
productOne report1 publisher

Four-times-faster incident pipeline caught just 64% of in-scope incidents in a bad month

One SaaS team's rebuild of incident detection on Kafka and Flink cut telemetry lag from over 40 seconds to under 10, according to its CNCF post. Over eighteen months its recall ran from about 60% to 86% and back to 64%, so speed alone says little about which outages get caught.

Publishers:cncf.io

Reality

Evidence45
Adoption20
Hype gap+10
Incentives40
Confidence40
securityOne report1 publisher

EU's Cyber Resilience Act puts Helm chart and Kubernetes operator vendors on a 24-hour exploit clock

EU Cyber Resilience Act rules have required 24-hour ENISA warnings on exploited flaws in commercial container images since Sept. 11, 2026. Vendors of supported Kubernetes operators and Helm charts are on the same clock, well before the rest of the law is enforced in December 2027.

Reality

Evidence50
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence55
buildOne report1 publisher

Atlassian rebuilds its 100,000-host metrics pipeline on OpenTelemetry behind the old StatsD interface

Atlassian rebuilt a metrics platform fed by about 100,000 hosts on OpenTelemetry while its applications kept sending StatsD packets to the same address. The platform team did the work alone. Moving thousands of services onto OpenTelemetry SDKs comes later.

Publishers:infoq.com

Reality

Evidence50
Adoption60
Hype gap+10
Incentives45
Confidence55
productOne report1 publisher

Stacklok's Mecatl trades the coding agent's unrestricted shell for a governed tool catalog

Stacklok open-sourced Mecatl, a coding-agent harness split into separate services for organizations that want to run hundreds of sessions on Kubernetes. The company argues that a harness built as one laptop process has to become a distributed system once agents run unattended.

Publishers:cncf.io

Reality

Evidence35
Adoption
Not scored
Hype gap+10
Incentives80
Confidence35
securityOne report1 publisher

Docker moves unattended AI agent runs into microVM sandboxes on its own cloud

Docker's new Cloud Sandboxes run AI agents unattended for hours in microVMs on Docker-hosted compute that scales from 1 to 16 vCPUs. Teams that adopt it move agent secrets and policy enforcement into Docker's cloud, on isolation claims that so far come only from Docker.

Reality

Evidence30
Adoption
Not scored
Hype gap+35
Incentives80
Confidence35
buildOne report1 publisher

Docker's alpine cold start swings fourfold between two 2026 benchmark writeups

Two 2026 writeups measured Docker's alpine cold start at 0.31 and 1.23 seconds, a fourfold spread on the same test. The rootless networking backend a host runs moves throughput from about 40 Gbps to 3.

Publishers:dev.to

Reality

Evidence40
Adoption38
Hype gap+12
Incentives
Not scored
Confidence45
productOne report1 publisher

Docker hands CNCF a spec that makes an agent's permission list part of the image

Docker released its Sandbox Kit Spec under Apache 2.0 and is taking it to CNCF, with nine named vendors already shipping Kits for their own tools. Enforcement still belongs to the runtime. In the post, that runtime is Docker Sandboxes.

Publishers:docker.com

Reality

Evidence42
Adoption20
Hype gap+32
Incentives84
Confidence58
buildOne report1 publisher

Backstage v1.54 models AI agents as catalog entities with an allowed-tools list

Backstage's catalog is now something coding agents call at runtime, and the AiResource kind added in v1.54 records which tools a given agent may use. Platform teams still have to work out what checks that record.

Publishers:dev.to

Reality

Evidence34
Adoption45
Hype gap+42
Incentives72
Confidence40
buildOne report1 publisher

Server-side apply moves ArgoCD's diff into the Kubernetes API server

ArgoCD now hands diff calculation to the API server and accepts OCI registries as first-class sources. The same write-up still calls Git the sole source of truth, so teams pulling charts from Harbor have to decide which system records intent.

Publishers:dev.to

Reality

Evidence24
Adoption30
Hype gap+34
Incentives
Not scored
Confidence35
buildOne report1 publisher

Foundry's automated grading needs the trace to carry the content it grades

Microsoft Foundry writes agent runs as OpenTelemetry spans with gen_ai attributes and exports them to Azure Monitor, where evaluators score sampled production traffic off the same records. Those attributes include tool arguments.

Publishers:dev.to

Reality

Evidence40
Adoption
Not scored
Hype gap+10
Incentives55
Confidence45
buildOne report1 publisher

China Merchants Bank's 60% token-cost cut outpaces the utilization gain it credits

The bank pooled nearly 10,000 heterogeneous accelerator cards under Kubernetes and reports average utilization rising from 35% to more than 60%. That density supplies 1.71 of the 2.5x drop in cost per million tokens.

Publishers:thenewstack.io

Reality

Evidence40
Adoption55
Hype gap+25
Incentives65
Confidence45
buildOne report1 publisher

Buildpacks move the base image choice out of every application repository

In an account from The New Stack, a patched runtime image still misses production a week later because every service builds its own way, and buildpacks are offered as the shared path that closes the gap.

Publishers:thenewstack.io

Reality

Evidence32
Adoption
Not scored
Hype gap+28
Incentives
Not scored
Confidence44
productOne report1 publisher

Atlassian swapped its metrics engine behind the same StatsD address on 100,000 hosts

Atlassian's platform team rebuilt collection, ingest, aggregation and forwarding on OpenTelemetry Collectors across 14 regions. Applications kept firing StatsD over UDP, so no service team had to re-instrument first.

Publishers:cncf.io

Reality

Evidence56
Adoption66
Hype gap+8
Incentives68
Confidence62
buildOne report1 publisher

Karmada graduates from the CNCF five years after entering the Sandbox

The v1.19 release shipped with the graduation announcement, improving multi-component scheduling for AI training jobs and switching priority-based scheduling on by default for anyone who upgrades.

Publishers:infoq.com

Reality

Evidence58
Adoption74
Hype gap+12
Incentives68
Confidence63

Earlier coverage

  1. Kubernetes v1.37 turns scale-to-zero autoscaling on by default

    Build · September 11, 2026 · One report1 publisher