Cloud Native

Cloud Native

65 articles · latest first

Cloud Native

Istio 1.31.0 released — ISTIO-SECURITY-2026-006 fixes Envoy CVEs; 1.28 EOL

Istio 1.31.0 fixes Envoy CVEs in ISTIO-SECURITY-2026-006, marks 1.28 EOL, and adds Helm-focused docs and VM artifact hosting. Prioritize upgrades now.

Sep 2, 2026·3mistioenvoy
Cloud Native

Istio 1.30.4 urgent patch: fixes Envoy CVEs and BackendTLSPolicy fail-open

Istio 1.30.4 fixes Envoy CVEs, an EnvoyFilter control-plane DoS, and a BackendTLSPolicy fail-open. CNCF guidance, Flux mirroring, and OpenTelemetry logs.

Sep 1, 2026·3mistioenvoy
Cloud Native

Istio 1.30.4: patches Envoy CVEs and fixes Backend TLS policy fail-open

Istio 1.30.4 (Aug 27, 2026) patches multiple Envoy CVEs, fixes an EnvoyFilter control-plane DoS and a Backend TLS policy fail-open — urgent for 1.29/1.30 users.

Aug 30, 2026·3mistioenvoy
Cloud Native

Istio 1.30.4 (ISTIO-SECURITY-2026-006) — Envoy CVEs, EnvoyFilter DoS & sidecar TLS fail-open fixes

Istio 1.30.4 (ISTIO-SECURITY-2026-006) fixes multiple Envoy CVEs and two issues: an EnvoyFilter control-plane DoS and a sidecar TLS fail-open risking plaintext.

Aug 29, 2026·3mistioenvoy
Cloud Native

Flux CD: Declarative Artifact Mirroring with Signature Verification

Flux CD adds declarative mirroring for container images, Helm charts and OCI artifacts with signature verification, provenance policies and minimum artifact age

Aug 28, 2026·3mflux-cdgitops
Cloud Native

Cilium 1.20: eBPF datapath plugins and advanced Gateway API support

Cilium documents an eBPF datapath extension and expands Gateway API support (ExternalAuth, TCPRoute, UDPRoute), making eBPF a first-class platform extension.

Aug 26, 2026·3mciliumebpf
Cloud Native

Cilium 1.20.1 with backports to 1.19/1.18; Argo CD 3.5.1; Kubeflow & Buildpacks graduate to CNCF

Cilium 1.20.1 with backports to 1.19/1.18; Argo CD 3.5.1 lands. Kubeflow and Cloud Native Buildpacks graduate to CNCF, shifting ML and build automation into ops.

Aug 25, 2026·3mciliumargo-cd
Cloud Native

Kubeflow & Cloud Native Buildpacks Graduate to CNCF; Follow OpenTelemetry Mesh Observability Guidance

CNCF graduated Kubeflow and Cloud Native Buildpacks. Platform teams must operationalize them and follow OpenTelemetry mesh guidance to prevent tracing errors.

Aug 24, 2026·3mkubeflowcloud-native-buildpacks
Cloud Native

Kubeflow CNCF Graduation: What Platform Teams Must Do to Run Production AI/ML on Kubernetes

Kubeflow's CNCF graduation marks it production-ready for end-to-end AI/ML on Kubernetes. Platform teams must treat Kubeflow as auditable, first-class infra.

Aug 22, 2026·3mkubeflowcncf
Cloud Native

Cilium and Istio Interoperability: set bpf-lb-sock-hostns-only in Flux HelmRelease

Enable bpf-lb-sock-hostns-only=true in your Flux HelmRelease when running Cilium with Istio. Update runbooks to use Hubble, cilium-dbg, and connectivity tests.

Aug 21, 2026·3mciliumistio
Cloud Native

Argo CD 3.5: 3.2 End-of-Life and Upgrade Guidance for Platform Teams

Argo CD 3.5 declares the 3.2 line EOL. Teams on 3.2 must upgrade to a supported release to keep GitOps control planes secure, maintained, and compatible.

Aug 20, 2026·3margo-cdkubeflow
Cloud Native

Kubeflow CNCF Graduation: What Platform Teams Must Do to Run Model Lifecycles on Kubernetes

Kubeflow graduated at CNCF (Aug 17, 2026), signaling platform teams must treat model lifecycle tooling as core infrastructure with procurement and security.

Aug 18, 2026·3mcloud-nativekubeflow
53 more