Learn how to migrate from Ingress-NGINX to Gateway API using the stable 1.0 release of Ingress2Gateway, featuring support for over 30 annotations and comprehensive integration testing.
Microsoft and Isovalent bring transparent workload-level mutual TLS to AKS without sidecars, application changes, or service mesh complexity.
Red Hat has released OpenShift Service Mesh 3.3, bringing post-quantum cryptography (PQC), AI enablement features, and foundational support for external VM integration. Based on Istio 1.28 and Kiali 2.22, this release targets organizations preparing infrastructure for both emerging security threats and modern workload patterns. The timing is significant: while practical quantum computing attacks remain years […]
The Cloud Native Computing Foundation has unveiled the CARE Program (Certification Advancement & Recertification Experience), a significant restructuring of its certification renewal policy that addresses long-standing friction in maintaining multiple Kubernetes credentials. The announcement coincides with the Kubestronaut community surpassing 3,500 members—a milestone reflecting both the depth of Kubernetes expertise in the industry and the […]
Grafana has released the OpenLIT Operator, a Kubernetes-native solution for monitoring AI workloads without requiring code changes. The integration with Grafana Clouds AI Observability suite promises automatic instrumentation of LLMs, vector databases, and agent frameworks—addressing a critical gap as AI infrastructure becomes standard in production environments. For organizations struggling to gain visibility into distributed AI […]
The vLLM project has released version 0.18.0, a substantial update featuring 445 commits from 213 contributors including 61 new contributors. This release significantly expands deployment flexibility for production LLM serving with new protocol support, architectural improvements for multimodal workloads, and substantial enhancements to memory management that directly address operational pain points for large-scale inference deployments. […]
Cloudflare is officially entering the frontier model race with a significant announcement that expands its AI platform beyond small, efficient models into the territory of large-scale open-source LLMs. The company revealed that Workers AI now supports large frontier models, starting with Moonshot AIs Kimi K2.5. This marks a strategic pivot for Workers AI, which has […]
Grafana Cloud AI Observability and the OpenLIT Operator point to a practical operational pattern for LLM workloads on Kubernetes: instrument by policy, collect with OpenTelemetry, and make cost, latency, and quality visible without asking every application team to wire tracing by hand.
Kyverno’s policy-as-code approach keeps gaining traction because it meets Kubernetes teams where they already work: YAML, CRDs, admission control, and cluster-native workflows. The real value is not novelty but operational fit.
Crossplane 2.0 matters for AI infrastructure because it gives platform teams a declarative way to expose governed, reusable services to agents and developers through one control plane instead of a maze of tickets, scripts, and cloud consoles.
Platform Engineering Day’s growing emphasis on AI, security, and internal platform maturity is a useful signal: cloud-native teams are moving past raw infrastructure enthusiasm and toward the harder work of building governed, product-like platforms for developers and automation.
Morgan Stanley’s multi-year Flux journey shows that GitOps at enterprise scale is not just about choosing a reconciler. It is about onboarding, tenancy boundaries, source-of-truth design, and relentless tuning once the cluster count and resource count get large.
ARC 0.14.0 introduces multilabel support for runner scale sets, a new scaleset library client, and experimental Helm charts.
OpenTelemetry is deprecating the Span Events API to eliminate confusion and unify event handling through log-based events correlated with spans.
Kyverno provides Kubernetes-native Policy-as-Code using YAML instead of Rego, with validation, mutation, and generation policies for cluster governance.
containerd 2.3.0-beta.0 is the first LTS release under the new Kubernetes-aligned schedule, with CRI improvements, EROFS support, and two-year support commitment.
Five critical vulnerabilities dubbed IngressNightmare affect Kubernetes NGINX Ingress Controller versions prior to 1.12.1, with CVE-2025-1974 enabling unauthenticated RCE. Patch immediately.
containerd 2.3.0 introduces the project's first annual LTS release with a new 4-month cadence aligned with Kubernetes. Learn how to upgrade safely.
The Kubernetes image promoter (kpromo) underwent an invisible rewrite that deleted 20% of the codebase while dramatically improving speed and reliability.
Kubernetes 1.34 brings Dynamic Resource Allocation to GA, enabling proper GPU sharing, topology-aware scheduling, and gang scheduling for AI/ML workloads.
