devopsy.kinsta.cloud

Author: Veronica Haggar

  • Announcing the Refreshed Cloud Native Security Whitepaper

    The CNCF Security Technical Advisory Group (TAG) has just released a refreshed Cloud Native Security Whitepaper v2 to help educate the community about best practices for securing cloud native deployments. The whitepaper intends to provide organizations and their technical leadership with a clear understanding of cloud native security, its incorporation in lifecycle processes, and considerations for determining the applicability of standards such as NIST SSDF. The first version of the whitepaper was released on Nov 18, 2020. The paper has been translated into different languages and an audio release of version 1 can be found here.

    “In the past 18 months, the security industry and our group has evolved with attacks on supply chain and ransomware in the limelight. We received excellent feedback on improvements to the first version of the paper as part of a months-long retrospective process. Our group has also grown with multiple supplementary material like Secure Supply Chain Security Whitepaper, Cloud Native Security Map and Lexicon published since the first version of this paper. As a sign of the vibrant community, just like the first version, the people across the community brought their passion, skill sets and expertise to address end user feedback and growing pains in the Cloud Native Security space” said TAG Security Tech Lead Pushkar Joglekar. 

    While the large majority of the original paper, stands the test of time, this refreshed version demystifies security assurance and compliance by walking through specific use-cases of ransomware incident handling and how to secure financial institutions under EU regulations. Feedback from readers of the original paper is also addressed through inclusion of these new sections: 

    • Secure Defaults – Cloud Native 8: A high level guidance on implementing cloud native apps that are secure by default.
    • SSDF v1.1 mapping: Maps the NIST SSDF practices and tasks to Cloud Native Security Application Lifecycle
    • ATT&CK Threat matrix for Containers: Summary of how the threat matrix provides a structure towards applying guidance described in this paper
    • Guidance on how to share feedback: Instructions on how to share feedback on the paper is now part of the paper with a short summary on how feedback was collected and addressed after publication of the first version.  

    The CNCF Security TAG aims to facilitate a vendor neutral collaboration to discover and produce resources that enable secure access, policy control, and safety for operators, administrators, developers, and end-users across the cloud native ecosystem. If you are interested in participating in the Security TAG, check out the Charter for more information and please come say “Hi!” on #tag-security channel on CNCF Slack. 

    The whitepaper is available on GitHub.

  • Cloud Native Computing Foundation Welcomes Coinbase as Gold Member

    Innovator in the crypto economy affirms commitment to cloud native ecosystem

    Valencia, SPAIN, KubeCon + CloudNativeCon Europe – May 18, 2022 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, today announced that Coinbase has joined the foundation as a Gold member. 

    Coinbase provides a trusted and easy-to-use platform for accessing the broader crypto economy. 98 million+ verified users, 13,000 institutions, and 230,000 ecosystem partners in over 100 countries use Coinbase to easily and securely invest, spend, save, earn, and use crypto. The company’s mission is to increase economic freedom in the world through the crypto economy. To achieve this goal, it’s essential to develop common infrastructure that is transparent, safe, secure, and benefits all participants.

    “Coinbase’s infrastructure thrives on cloud native technology, and Kubernetes will continue to be of growing importance in our technology stack as the company evolves,” said Jordan Harband, Developer Relations Engineer at Coinbase. “We are investing heavily in cloud native technology to ensure the continued success and sustainability of cloud services for the developer ecosystem. We look forward to collaborating with CNCF to drive forward more initiatives, and to deliver and improve more tools for the community’s benefit.”

    Coinbase Cloud relies heavily on Kubernetes to provide a platform that enables the company to deploy and maintain blockchain infrastructure across multiple cloud providers. For this reason, Coinbase employs core contributors to Kubernetes, and Coinbase Cloud has made contributions to several CNCF projects including Kong, kOps, Kyverno, and Flux. 

    “Coinbase has been a trailblazer in the cryptocurrency economy,” said Priyanka Sharma, executive director of the Cloud Native Computing Foundation. “With their particular set of challenges in a nascent yet world-changing industry, we are very pleased that Coinbase has decided to join forces with the CNCF ecosystem and look forward to the unique insights they will bring.”

    Additional Resources

    About Cloud Native Computing Foundation

    Cloud native computing empowers organizations to build and run scalable applications with an open source software stack in public, private, and hybrid clouds. The Cloud Native Computing Foundation (CNCF) hosts critical components of the global technology infrastructure, including Kubernetes, Prometheus, and Envoy. CNCF brings together the industry’s top developers, end users, and vendors and runs the largest open source developer conferences in the world. Supported by more than 500 members, including the world’s largest cloud computing and software companies, as well as over 200 innovative startups, CNCF is part of the nonprofit Linux Foundation. For more information, please visit www.cncf.io.

    ###

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page. Linux is a registered trademark of Linus Torvalds.

    Media Contact
    Jessie Adams-Shore
    The Linux Foundation
    PR@CNCF.io

  • Prometheus Associate Certification will Demonstrate Ability to Monitor Infrastructure

    New associate certification exam from CNCF and The Linux Foundation will test foundational knowledge and skills using Prometheus, the open source systems monitoring and alerting toolkit

    Valencia, SPAIN, KubeCon + CloudNativeCon Europe – May 18, 2022 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, and The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced the new Prometheus Certified Associate (PCA) exam. The PCA is a pre-professional certification designed for engineers or application developers with special interests in observability and monitoring within the Prometheus ecosystem.

    The PCA is modeled after Kubernetes certifications such as KCNA, CKA, or CKAD and is intended for candidates who have passed these certifications or have completed Prometheus-specific training or Cloud Engineer bootcamps. The exam is now in Beta testing and will be generally available later in 2022. 

    According to CNCF’s 2021 Cloud Native Survey, the use of Prometheus in production has reached 65%, an increase of 43% year-over-year. Production users include organizations like Adidas, Slack, JPMorgan Chase, Verizon, and Uber. Prometheus was the second project to join CNCF in 2016 and the second project to graduate in 2018, following only Kubernetes. 

    “As cloud native stacks have grown and matured, observability has become crucial for visibility into application metrics, performance, alerting and insights,” said Chris Aniszczyk, CTO of CNCF. “Prometheus is a key element of this, enabling organizations to build a foundation of observability. The PCA exam will allow developers to demonstrate their proficiency in Prometheus ecosystem and cloud native observability concepts.”

    PCA will consist of a multiple-choice, online certification exam testing entry-level skills and knowledge around best practices for monitoring cloud native applications and infrastructure and the ability to improve application performance through observability data. Successful candidates will be able to recognize when something is wrong with an implementation, monitor and gain insight into performance, debug issues, and feed data into other systems, including QA, security, and automation. The existing “Monitoring Systems and Services with Prometheus” training course can be helpful for those new to Prometheus.

    “There is an ongoing talent shortage in the cloud space, and the only way to address it is to get more individuals trained and certified in these emerging technologies,” said Clyde Seepersad, SVP, and general manager of training & certification at The Linux Foundation. “We have seen tremendous interest in Prometheus training as adoption of this impactful technology has increased, which is a fantastic starting point. This new certification will allow individuals skilled in this technology to verify their abilities to employers, helping advance their careers while beginning to address this talent gap.”

    The exam is being developed in partnership with Certiverse. As demonstrated with The Linux Foundation Certified IT Associate (LFCA) and Kubernetes and Cloud Native Associate (KCNA) exams, the company’s online exam development platform brings high-quality certifications to market with the speed required to keep IT content current and relevant.

    More information about the exam and topics to be covered in it is available here. Those interested in enrolling in the Beta may do so for free here. Additional details on exam availability will be announced in the coming months. 

    About Cloud Native Computing Foundation

    Cloud native computing empowers organizations to build and run scalable applications with an open source software stack in public, private, and hybrid clouds. The Cloud Native Computing Foundation (CNCF) hosts critical components of the global technology infrastructure, including Kubernetes, Prometheus, and Envoy. CNCF brings together the industry’s top developers, end users, and vendors, and runs the largest open source developer conferences in the world. Supported by more than 500 members, including the world’s largest cloud computing and software companies, as well as over 200 innovative startups, CNCF is part of the nonprofit Linux Foundation. For more information, please visit www.cncf.io.

    About the Linux Foundation

    Founded in 2000, the Linux Foundation is supported by more than 1,000 members and is the world’s leading home for collaboration on open source software, open standards, open data, and open hardware. Linux Foundation’s projects are critical to the world’s infrastructure including Linux, Kubernetes, Node.js, and more. The Linux Foundation’s methodology focuses on leveraging best practices and addressing the needs of contributors, users and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org.

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see its trademark usage page: www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

    # # #

    Media Contact:
    Katie Meinders
    The Linux Foundation
    PR@CNCF.io

  • CNCF Launches Cloud Native Network Function Certification Program

    New CNF Test Suite-based program will allow CSPs and telecom organizations to adopt Kubernetes and cloud native tools with confidence

    Valencia, SPAIN, KubeCon + CloudNativeCon Europe – May 18, 2022 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, today announced the Cloud Native Network Function (CNF) Certification Program. The CNF Certification Program will help Communication Service Providers (CSPs) and other telecommunications organizations identify which Network Equipment Providers (NEPs) follow cloud native best practices.

    CNFs are applications that implement or facilitate network functionality in a cloud native way. CSPs and other telecom organizations are migrating away from traditional Virtual Network Functions (VNFs) toward CNFs and Kubernetes-based infrastructures that provide service reliability while lowering capital and operating expenses and encouraging cross-cloud compatibility. The program will enable NEPs and CNF creators to demonstrate the adoption of cloud native best practices in their networking products. 

    “Moving to cloud native infrastructures has long been difficult for telecom providers who have transitioned to VNFs and found themselves with siloed resources and specialized solutions not built for the cloud,” said Priyanka Sharma, executive director of the Cloud Native Computing Foundation. “The CNF Certification program is designed to fill this gap by creating solutions optimized for cloud native environments. Some of the world’s largest telecom organizations, including Huawei, Nokia, T-Mobile, and Vodafone, already use Kubernetes and other cloud native technologies, and this program will make it easier for others to do the same.”   

    The CNF Certification Program runs on CNCF’s CNF Test Suite and supports any product that runs in a certified Kubernetes environment. The CNF Test Suite is an open source test suite for telcos to validate how well they are following cloud native principles and best practices, like immutable infrastructure and declarative APIs. It leverages 10 CNCF-hosted projects and several open source tools, including Fluentd, Helm, Jaeger, and Prometheus. Currently, the CNF Test Suite can run approximately 70 workload tests, which are segmented into seven different categories, including: 

    • Compatibility, Installability & Upgradability
    • Microservice
    • State
    • Reliability, Resilience & Availability
    • Observability & Diagnostics
    • Security
    • Configuration

    To get started, NEPs and CNF creators can self verify an application using the CNF Test Suite and submit results via pull request. Organizations that may not be ready to submit their results can still get started with the CNF Test Suite and use it to improve the “cloud-nativeness” in their products. CNFs that pass the CNF Certification will be considered ‘Certified,’ with more advanced levels to come as the program expands. 

    To learn more about the CNF Certification Program or get involved in CNCF’s Telco initiatives:

    • Read CNCF’s recent blog, ‘Testing cloud native best practices with the CNF Test Suite’ 
    • Join the conversation on Slack (#cnf-certification, #cnf-testsuite-dev)
    • Attend CNF Test Suite Contributor calls on Thursdays at 14:15 UTC
    • Join the CNF Working Group meetings on Mondays at 16:00 UTC 

    Supporting Quotes:

    “Building, deploying, and operating Telco workloads across distributed cloud environments is complex,” said Tom Kivlin, principal cloud architect at Vodafone. “It is important to adopt cloud native best practices as we evolve to achieve our goals for agility, automation, and optimization. The CNF Certification is a great tool with which we can measure and drive cloud native practices across our platforms and network functions. We look forward to working with our partners and the CNCF community to further develop and drive adoption of the CNF Certification Program.”

    “MATRIXX is excited to participate in the CNCF CNF Certification Program. We believe it will be instrumental in helping the telecom industry adopt cloud native technologies and best practices by harnessing the power of open source innovation and community collaboration,” said Marc Price, CTO, MATRIXX Software. “To realize the full potential of 5G, service providers are transitioning to CNFs, though telecom networking presents new and unique challenges that require a continued evolution in cloud native best practices. This program will help our advancements in cloud native solutions while ensuring customers can implement these tools with confidence.”

    “PANTHEON.tech is delighted to be part of CNCF’s initiative to show what cloud native computing should strive to be for telecom organizations,” said Miroslav Mikluš, CPO of PANTHEON.tech. “We’re excited to demonstrate our expertise in cloud native network functions by being one of the pioneering solutions to try the CNF Certification. Open source values and cloud native best practices are at the heart of what we do, and we are glad to be part of CNCF‘s effort to drive these forward.”

    Additional Resources

    About Cloud Native Computing Foundation

    Cloud native computing empowers organizations to build and run scalable applications with an open source software stack in public, private, and hybrid clouds. The Cloud Native Computing Foundation (CNCF) hosts critical components of the global technology infrastructure, including Kubernetes, Prometheus, and Envoy. CNCF brings together the industry’s top developers, end users, and vendors and runs the largest open source developer conferences in the world. Supported by more than 500 members, including the world’s largest cloud computing and software companies, as well as over 200 innovative startups, CNCF is part of the nonprofit Linux Foundation. For more information, please visit www.cncf.io.

    ###

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page. Linux is a registered trademark of Linus Torvalds.

    Media Contact
    Katie Meinders
    The Linux Foundation
    PR@CNCF.io

  • Boeing Joins Cloud Native Computing Foundation as a Platinum Member

    Leading global aerospace company invests heavily in the cloud native ecosystem

    Valencia, SPAIN, KubeCon + CloudNativeCon Europe – May 18, 2022 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, today announced that The Boeing Company has joined the Foundation as a Platinum member. As part of its Platinum membership, the company will also have a representative on the CNCF Governing Board. 

    Boeing, one of the world’s largest global aerospace manufacturers, has over a century-long tradition of aerospace leadership and innovation. The company has built a huge software footprint and global community of thousands of software engineers who share a passion for computing, learning, and expanding technological boundaries. As Boeing invests in accelerating the digital revolution, it is looking for opportunities to foster and contribute as well as create new open source projects built on top of open source technologies.

    “At Boeing, we are working to leverage the flexibility and massive scalability of public cloud deployments to build extremely robust aerospace products and deliver software solutions with rapid iteration and innovation to our customers,” said Jinnah Hosein, Boeing’s Vice President of Software Engineering. “Boeing is pleased to join CNCF and be part of the ecosystem. I am looking forward to this partnership and together we’ll change the world with extremely robust software deployments.”

    Boeing is committed to increasing its involvement in open source projects, and recently started its first Open Source Program Office (OSPO). As a company that, from the sea floor to space, protects, connects, and explores our world, Boeing is dedicated to learning, knowledge sharing, and providing its global team members opportunities to grow and thrive. 

    “Boeing is an enduring global company that impacts the lives of people all over the world. The company has significant experience and resources that will hugely benefit the CNCF community,” said Priyanka Sharma, Executive Director of the Cloud Native Computing Foundation. “We look forward to collaborating with them and welcoming Ricardo Torres to the Governing Board.”

    Additional Resources

    About Cloud Native Computing Foundation

    Cloud native computing empowers organizations to build and run scalable applications with an open source software stack in public, private, and hybrid clouds. The Cloud Native Computing Foundation (CNCF) hosts critical components of the global technology infrastructure, including Kubernetes, Prometheus, and Envoy. CNCF brings together the industry’s top developers, end users, and vendors and runs the largest open source developer conferences in the world. Supported by more than 500 members, including the world’s largest cloud computing and software companies, as well as over 200 innovative startups, CNCF is part of the nonprofit Linux Foundation. For more information, please visit www.cncf.io.

    ###

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page. Linux is a registered trademark of Linus Torvalds.

    Media Contact
    Jessie Adams-Shore
    The Linux Foundation
    PR@CNCF.io

  • SPIRE Now Runs on Windows!

    At its heart, the SPIRE project aims to solve the problem of securely issuing workload identities at scale, no matter where the workload is running. It does that by having an extensible architecture composed of plugins that allow SPIRE to grow depending on the needs of supporting different platforms, cloud providers, etc. Until now, SPIRE could only be deployed on Linux platforms. But that is now a thing of the past with the new experimental Windows support in SPIRE 1.3.0!

    What kind of support is being introduced?

    Over the years, SPIRE, a production-ready implementation of the SPIFFE standards, has gained a high degree of maturity on Linux platforms. We have learned a lot in terms of how SPIRE is deployed, operated, and integrated into a variety of Linux environments.

    Windows support is being introduced incrementally as an experimental feature. We anticipate that as our operational experience with Windows evolves, changes that impact the user experience or functionality will need to be introduced. We will be working hard to fill the gaps and stabilize Windows support over the next several SPIRE releases.

    The 1.3.0 release adds support for running both the SPIRE Server and Agent on Windows. Existing plugins have been adapted to work under Windows, where applicable. In addition, a new Windows-specific workload attestor has been added (similar to the existing Unix workload attestor) for providing Windows-specific attributes to Windows workloads.

    What’s the difference?

    One guiding principle of the SPIRE project is to strive for ease-of-use and intuitive configuration. With that in mind, running SPIRE on Windows feels very similar to running it on Linux. Configuration differences are limited to areas where platform specific features are in use (e.g. Unix Domain Sockets, named pipes, etc).

    The work that we have ahead

    Supporting SPIRE on an additional operating system is not a trivial task. As we pointed out, SPIRE has been growing in maturity and stability on Linux platforms over several years. We know that we will need to work across several releases to provide a similar level of feature parity with what we have today on Linux platforms. We have a lot of work ahead in multiple dimensions:

    • The SPIFFE Workload Endpoint standard does not yet support exposing the Workload API as a named pipe endpoint. We will be working closely with the SPIFFE SIG Spec group to update the specification to standardize the way that SPIFFE implementers (like SPIRE) can use named pipes to serve and consume the Workload API.
    • The K8s workload attestor plugin is not yet supported on Windows due to a difference in support for key K8s features that we rely on to attest K8s-based workloads. We are actively investigating alternative means to attest Windows workloads running in K8s.
    • While the go-spiffe library has been updated to support the use of named pipes with the Workload API, other language libraries have not. This is in part due to a lack of support for named pipe transports in the C/C++ gRPC library. We have work to do to provide this support, which may include collaborating with others in the ecosystem to develop and upstream requisite changes to libraries like gRPC.

    We want to hear from you

    Though support for Windows is very new, we’ve collaborated with interested community members to design and verify the current feature set. SPIRE is already running in test environments, with plans to deploy to thousands of Windows hosts. This early adoption has been and will continue to be integral to stabilizing our support. We are very eager to learn more from the community and early adopters how we can better support providing secure service identity to workloads running in Windows environments.

    If you have requests or anything to say about this new support, we want to hear! Please don’t hesitate to open an issue in the GitHub repository asking for a feature or to report a bug. Also, you can join the awesome SPIFFE community on Slack: https://slack.spiffe.io/. We will be happy to answer your questions and discuss your requests. Lastly, if you want to be up to date on all the news for the project, join the SPIFFE Announce mailing group, which is a low frequency list of project announcements: https://groups.google.com/a/spiffe.io/g/announce.

  • Cloud Native Computing Foundation Hits 800 Member Milestone at KubeCon + CloudNativeCon Europe 2022

    An additional 38 organizations have joined the Foundation this quarter to make cloud native computing ubiquitous and accessible to all

    Valencia, SPAIN, KubeCon + CloudNativeCon Europe – May 18, 2022 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced today the addition of 38 organizations, dedicated to working together with over 800 other members to drive innovation through the development and standardization of cloud native technology. 

    “We are thrilled to welcome so many Europe-based organizations this quarter as our global community convenes in Spain for the first in-person KubeCon + CloudNativeCon Europe in three years,” said Priyanka Sharma, executive director of the Cloud Native Computing Foundation. “We are humbled to see the continued momentum in our diverse ecosystem of doers and look forward to working together to foster and sustain our growing number of projects.” 

    About the newest Silver Members:

    • Ambient IT is a French training organization specializing in IT and digital professions.
    • Andes Digital is a consulting company focused on Open Source solutions, especially in the multi-cloud – hybrid-cloud space offering services such as enterprise integration, Kubernetes managed services, cloud migration and others. 
    • Aokumo is a cloud infrastructure company that helps organizations modernize, innovate, and accelerate their digital transformation on AWS and Azure with Cloud-Native Solutions, Kubernetes, DevOps, CI/CD, and Data Analytics. 
    • Appaegis Access Fabric secures cloud infrastructure access with advanced Zero Trust strategies to secure application and data access and mitigate permission abuse by federating control plane sources of IAM, Key vault and credential management and monitoring data plane transactions. 
    • Appstellar is a Cloud and DevOps company delivering cloud software development and DevOps solutions (including Kubernetes Enablement and AWS Cloud Consulting) to businesses that want to reach new heights
    • Aserto is reinventing Auth: instead of focusing on user login and authentication, our modern authorization platform makes it easy for software developers to define, enforce, and evolve what users are permitted to do inside their applications. 
    • Atos is the global leader in secure and decarbonized digital with a range of market-leading digital solutions along with consultancy services, digital security and decarbonization offerings; an end-to-end partnership approach.
    • Avanade is the leading provider of innovative digital, cloud and advisory services, industry solutions and design-led experiences across the Microsoft ecosystem. 
    • B1 Systems provides consulting, training, managed service & support for Linux / Open Source – cloud & container technologies, virtualization & high availability as well as monitoring, system & configuration management. 
    • claion is a professional company leading the next IT trend through powerful drives.
    • Clockwork empowers next generation time-sensitive applications by enabling “congestion-free, zero-drop networks” using its scalable and accurate time synchronization technology.
    • Cloudshape is a multi and hybrid cloud solution provider offering services and solutions around Application Modernization, Dev(Sec)Ops and Kubernetes 
    • Cloudside is your trusted team of cloud-native and data problem solvers, helping you drive the best business outcomes with cloud as a catalyst 
    • Cycode is a complete software supply chain security solution that provides visibility, security, and integrity across all phases of the SDLC.
    • Doppler is the multi-cloud SecretOps Platform developers and security teams trust to provide secrets management at enterprise scale. 
    • Edgeless Systems is building Constellation, the Kubernetes distribution for confidential computing.
    • Entando is the leading open-source application composition platform for Kubernetes. 
    • Exein is a leading company in embedded security; the first security ecosystem for the IoT devices development and management cycle. 
    • groundcover is the first eBPF-based production monitoring tool that makes complete K8s observability easy. groundcover provides a full picture of your production and covers every application instantly with no code changes. 
    • Mayfield is a global venture capital firm with a people-first philosophy and a 50+ year track record of inception and early-stage investing, partnering with founders to build iconic enterprise, consumer and engineering biology companies. 
    • Miraxia is a software consulting company providing middleware design and optimization services for edge devices with the aid of a lot of experience in the consumer electronics industry for 20+ years. 
    • MoreSec Tech was founded in April 2016 and headquartered in Hangzhou, China. In the vanguard of cloud-native security, MoreSec provides a full-stack and full life cycle cloud-native application protection platform, which starts in development and extends to runtime protection of infrastructure, microservice networks, workloads, applications and data
    • OpsVerse provides open source-based, fully managed DevOps tools that customers can deploy anywhere within minutes to improve their MTTR, MTTD, and developer productivity. 
    • Skyloud is a company specializing in new Cloud technologies. We support Startups and Companies in setting up, optimizing and managing Cloud Native infrastructure. 
    • Spacelift empowers collaborative infrastructure for modern software teams to manage any cloud, infrastructure, or service. 
    • Speedscale is a Kubernetes traffic replay framework that reproduces production-like conditions in non-prod environments so teams can identify performance and scale issues before their customers do.
    • SphereEx builds distributed data infrastructures and delivers a SaaS experience through the cloud, and was founded by the core team of Apache ShardingSphere – an open source ecosystem to transform any database into a distributed database system and enhance it with data sharding, elastic scaling, encryption features & more. 
    • Superblocks is a programmable internal tooling platform for developers to build custom internal apps, workflows and scheduled jobs fast. Try it for free today!
    • Tenable® is the Cyber Exposure company, helping approximately 40,000 organizations around the globe understand and reduce cyber risk by giving them visibility into their attack surface. Tenable delivered the world’s first platform to see and secure any digital asset on any computing platform. 
    • TL Consulting helps accelerate your Cloud native journey through the delivery of high-end transformational services and enterprise-grade solutions by harnessing the power of Kubernetes, microservices and multi-cloud environment automation to effectively modernise your application landscape and future proof your business. 
    • Uniserver is a Netherlands-based cloud distributor, we give you the freedom and security to focus on your own strenght without worrying about your IT infrastructure. 
    • Zelarsoft, the creators of Klusternetes: Kubernetes virtual clusters in less than a minute, on the infrastructure of your choice, either cloud or on-premise, enabling self-service k8s without adding operational complexity.

    About the newest Academic Member:

    • ICPSR advances and expands social and behavioral research, acting as a global leader in data stewardship and providing rich data resources and responsive educational opportunities for present and future generations.

    About the newest End User Members:

    • Prodigy Education is a global leader in game-based learning. Our mission is to help every student in the world love learning, motivating millions worldwide via fun, secure and accessible curriculum-aligned gameplay experiences. 
    • Wayfair is one of the world’s largest destinations for the home, an e-commerce leader serving 27 million customers with suppliers and operations throughout North America and Europe, employing more than 16,000 people.

    About the newest End User Supporters:

    • Juni is the financial companion that provides ecommerce entrepreneurs with an all-in-one financial platform to make better decisions, scale up, and unlock the full potential of ecommerce.
    • SNCF is a world leader in public transportation.
    • Volvo Group is one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines.

    With the addition of these new members, there are now over 145 organizations in the CNCF End User Community. This group regularly meets to share adoption best practices and feedback on project roadmaps and future projects for CNCF technical leaders to consider.

    Additional Resources

    About Cloud Native Computing Foundation

    Cloud native computing empowers organizations to build and run scalable applications with an open source software stack in public, private, and hybrid clouds. The Cloud Native Computing Foundation (CNCF) hosts critical components of the global technology infrastructure, including Kubernetes, Prometheus, and Envoy. CNCF brings together the industry’s top developers, end users, and vendors, and runs the largest open source developer conferences in the world. Supported by more than 500 members, including the world’s largest cloud computing and software companies, as well as over 200 innovative startups, CNCF is part of the nonprofit Linux Foundation. For more information, please visit www.cncf.io.

    ###

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page. Linux is a registered trademark of Linus Torvalds.

    Media Contact
    Jessie Adams-Shore
    The Linux Foundation
    PR@CNCF.io

  • Cloud Native Maturity Model 2.0

    KubeCon 2021 in North America saw the launch of the Cloud Native Maturity Model, a model launched by the Cartografos Working Group to help adopters and end-users to navigate the CNCF landscape and the wider cloud native ecosystem. As part of the launch, the Group also launched the book Admiral Bash’s Island Adventure. 

    Today, we are pleased to announce the update of the Cloud Native Maturity Model. Working with new members of the CNCF community including Annalisa Gennaro, Marcello Testi and Jonathan Gershater, amongst existing members Danielle Cook, SImon Forster, Robert Glenn and John Forman, the group spent the last six months reviewing the model and speaking with TAGs to ensure it is reflective of how rapidly the market changes. 

    The maturity model includes 5 levels each one covering people, process, policy and technology. These are broken out by key themes. Here below you’ll get an overview of some of the updates. 

    Meet the Cartografos Working Group at KubeCon EU in the Project Pavillion! Learn more about the group and get involved! You can also attend the session, Intro to the Maturity Model. 

    New Section: Business Outcomes

    As part of the maturity model, we felt it was important to outline not just what to expect from the technology, but what the business could expect. Today we launch the new business outcomes section. In line with the model, we considered what business leaders – CEO, CFO, board members, etc – could expect from cloud native. 

    This included ensuring alignment of business goals to how cloud native will help you achieve those. Some examples may include: 

    • Scale to 1 million users: Provide flexible, scalable infrastructure based on users at any given time equipped with fast failover in the event of a problem. 
    • Deliver exceptional customer experience: Ensure the app is reliable as to not frustrate users
    • Get features to market faster: Enable a microservices approach to building apps. Smaller teams are more agile because each team has a focused function. APIs minimize the amount of cross-team communication required to build and deploy.

    While cloud native is not a linear evolution, and setbacks will be experienced, the first level in the cloud native maturity is to understand how you will measure success (your KPIs) and how you’ll demonstrate those to stakeholders. 

    Some quantitative and qualitative example KPIs may include: 

    • Reduced spend on app infrastructure by 25% by optimizing for cost
    • Dev cost lowered by 10%
    • Reduced team focus on app infrastructure by 15% by automating as much as possible
    • Increased security for the application by automating CVE identification in containers 
    • Improve compliance as you can restrict and track access to the application; demonstrate compliance with SOC 2
    • Accelerated development life cycles as you implement CI/CD pipelines shipping 10% more features per quarter
    • Migrate plan – this will vary depending on your organization, but you should have a migration plan in place. Whether that’s to migrate one application first, or several, you should have this established. 
    • Improved customer experience measured by increased Net Promoter Scores (NPS)
    • Elimination of information silos: departments no longer isolated; unique, integrated ecosystem in place.
    • Alignment of business and IT goals: everyone is involved and aware, so that resources are better addressed to meet those goals efficiently.
    • Increased internal communication: cross-pollination offers new perspectives with shared knowledge.

    You can review the full business outcomes on GitHub. 

    Process Updates

    Included now in the process section are information on GitOps and the requirement to establish a Center of Excellence for CI/CD. We also adjusted level three to include information on how standards are emerging. 

    Technology Updates

    We’ve worked to further raise the profile of security throughout Technology.  We’ve also worked to further integrate Infrastructure as Code.

    Next Steps

    The Cartografos Working Group is committed to keeping the maturity model up to date and relevant so that organizations of all sizes can use it as they journey through the phases. As part of this, our next steps include: 

    • re-evaluating the model structure and layout
    • Continued refinement of published artifacts
    • Website integration into cncf.io (goal)
    • Partnership with TAGs and integrating material into model
    • Review of the Working Group Charter

    We welcome any person working in the cloud native space to join this group. Information can be found in the resource section. You can also reach out to Danielle Cook (danielle@fairwinds.com) or Simon Forster (simon@stakegy.com) for more information and to get involved. 

    Resources

    Cloud Native Maturity Model

  • HCL Technologies Launches Kubernetes Migration Platform to Accelerate Application Modernization

    Automated platform enables repeatable, reliable, and cost-effective transition from Cloud Foundry environments

    Valencia, SPAIN and Noida, INDIA – May 16, 2022 – HCL Technologies (HCL), a leading global technology company, has launched its Kubernetes Migration Platform (KMP) to help organizations accelerate application modernization. HCL KMP is an automated solution that helps organizations migrate workloads from legacy on-premises and Cloud Foundry environments to modern Kubernetes-based platforms. KMP’s repeatable, reliable, and cost-effective approach enables organizations to reduce risk and complete migrations up to 120 times faster compared to manual alternatives.

    In addition, HCL KMP enables organizations to effortlessly move workloads between hybrid, multi-cloud environments built on different Kubernetes-based platforms, including; Google GKE, Microsoft Azure AKS, Amazon EKS, VMWare TKGI, Rancher, and Red Hat OpenShift. The platform offers organizations more freedom of choice, ensuring they are run on the most cost-effective platforms and helping to avoid vendor lock-in.

    “Enterprises have grown increasingly concerned with the operational costs of maintaining legacy Cloud Foundry environments in a cloud-native world,” said Kalyan Kumar, CTO and Head of Ecosystems, HCL Technologies. “Limited modernization capabilities in Cloud Foundry have made it difficult to migrate to Kubernetes without an excessive investment of time and resources. KMP creates a bridge to the future, by offering our clients a fast, fully automated, and hassle-free journey to any Kubernetes-based platform.”

    For more information on how to get started, meet HCL Technologies at KubeCon Europe in Valencia, Booth G1, or email cnlabs@hcltech.com.

    About HCL Technologies

    HCL Technologies (HCL) empowers global enterprises with technology for the next decade, today. HCL’s Mode 1-2-3 strategy, based on its deep-domain industry expertise, customer-centricity and entrepreneurial culture of Ideapreneurship™, enables businesses to transform into next-gen enterprises.

    HCL offers its services and products through three business units: IT and Business Services (ITBS), Engineering and R&D Services (ERS) and Products & Platforms (P&P). ITBS enables global enterprises to transform their businesses through offerings in the areas of applications, infrastructure, digital process operations and next generational digital transformation solutions. ERS offers engineering services and solutions in all aspects of product development and platform engineering. P&P provides modernized software products to global clients for their technology and industry specific requirements. Through its cutting-edge co-innovation labs, global delivery capabilities and broad global network, HCL delivers holistic services in various industry verticals, categorized as Financial Services, Manufacturing, Technology & Services, Telecom & Media, Retail & CPG, Life Sciences & Healthcare and Public Services.

    As a leading global technology company, HCL takes pride in its diversity, social responsibility, sustainability and education initiatives. For the 12 months ended March 31, 2022, HCL had consolidated revenue of US$11.48 billion. Its nearly 209,000 ideapreneurs operate out of 52 countries.

    For more information, visit www.hcltech.com

    Forward–looking Statement

    Certain statements in this release are forward-looking statements, which involve a number of risks, uncertainties, assumptions and other factors that could cause actual results to differ materially from those in such forward-looking statements. All statements, other than statements of historical fact are statements that could be deemed forward looking statements, including but not limited to the statements containing the words ‘planned’, ‘expects’, ‘believes’, ‘strategy’, ‘opportunity’, ‘anticipates’, ‘hopes’ or other similar words. The risks and uncertainties relating to these statements include, but are not limited to, risks and uncertainties regarding impact of pending regulatory proceedings, fluctuations in earnings, our ability to manage growth, intense competition in IT services, Business Process Outsourcing and consulting services including those factors which may affect our cost advantage, wage increases in India, customer acceptances of our services, products and fee structures, our ability to attract and retain highly skilled professionals, our ability to integrate acquired assets in a cost effective and timely manner, time and cost overruns on fixed-price, fixed-time frame contracts, client concentration, restrictions on immigration, our ability to manage our international operations, reduced demand for technology in our key focus areas, disruptions in telecommunication networks, our ability to successfully complete and integrate potential acquisitions, the success of our brand development efforts, liability for damages on our service contracts, the success of the companies / entities in which we have made strategic investments, withdrawal of governmental fiscal incentives, political instability, legal restrictions on raising capital or acquiring companies outside India, and unauthorized use of our intellectual property, other risks, uncertainties and general economic conditions affecting our industry. There can be no assurance that the forward-looking statements made herein will prove to be accurate, and issuance of such forward looking statements should not be regarded as a representation by the Company or any other person that the objective and plans of the Company will be achieved. All forward-looking statements made herein are based on information presently available to the management of the Company and the Company does not undertake to update any forward-looking statement that may be made from time to time by or on behalf of the Company.

    For further details, please contact:
    HCL Technologies
    Meenakshi Benjwal, Americas
    meenakshi.benjwal@hcl.com

    Elka Ghudial, EMEA
    elka.ghudial@hcl.com

    Devneeta Pahuja, India and APAC
    devneeta.p@hcl.com

  • Codeanywhere Helps You Shift to Infrastructure as Code

    With 12 years of experience, the Codeanywhere team is a testament to the power of consistency. Codeanywhere is enabling an increased productivity environment with an all-new editor which now supports the vast amount of VS Code extensions and supported languages. Four key concepts that have guided the last iteration of Codeanywhere are Infrastructure as Code (IaC), Ephemeral Environments, Instantaneous Spin-up and Scalable performance.

    Using descriptive models and machine-understandable definition files as part of your source Infrastructure as Code solves the problem of environment drift in the release pipeline. IaC follows the mantra that everything that can be defined in software should be so that it can be controlled automatically and programmatically. Improving speed, efficiency, accountability and consistency IaC saves time and money.

    This approach enables work in fresh (ephemeral) environments that align perfectly with modern CI flows and are available in seconds. Developers can use all the resources they need without local computer hardware constraints. In turn, this significantly improves the developer experience and according to the research made by Brandon Hall Group it significantly impacts employee retention by a staggering 82%.

    Ephemeral environments are no stranger to the DevOps world. They ensure repeatable and consistent environments without configuration drift. In modern CI workflows, it is common to have a fully functional environment for each pull request/branch where you try the new features or run functional tests. After the PR is merged, the environment is scrapped to free up resources for others.

    With cloud-based dev environments, developers will see an increase in productivity, be ready to code from day one, and remove the “It works on my machine” from their vocabularies. Also, companies can expect new developers to be more satisfied with the onboarding process and have a better retention rate. Now you can allow developers to truly choose any computers they want to work on, without restricting their choice to pre-setup machines.

    Codeanywhere will soon be releasing powerful new repeatable development environments based on the infrastructure-as-code concept and we can’t think of a better place to announce this than at KubeCon Europe 2022.

    “Codeanywhere’s vision is to migrate the world’s development environments to the cloud. Using ephemeral infrastructure-as-code architecture to create instant, fast, scalable, and most importantly secure development environments for all.” — Ivan Burazin, Codeanywhere CEO

    There is no reason not to embrace the same benefits in your development workflow. These ephemeral environments can range from very simple ones with just one container with one programming language and tooling to complex environments with databases, memory stores, and other services that mimic the real production environment.

    Reconsider your current practices and enjoy the benefits of Infrastructure as Code with the all-new Codeanywhere.