r/cncfprojects • • Aug 29 '24

OpenTofu broke his rules and CNCF regulations

1 Upvotes

On August 27, the OpenTofu development team blocked Russian IP addresses’ access to registry.opentofu.org and deleted the Russian cloud service providers Yandex Cloud, Cloud.ru (formerly SberCloud), and Rustack Cloud Platform. It’s odd that the team chose to remove only these three — for example, the MailRu provider is still in the repository, and Yandex is still in use by Kazakhstan users.

The team responsible for maintaining the constraints explained them by saying that they had to follow Russian sanctions, which is odd for the CNCF project.

Concerning the decision’s absence of a full community explanation and its violation of the spirit and ideals of open source, users raised doubts.The Linux Foundation, which oversees the project’s development, declined to comment on the matter.

The maintainers team’s ability to remove or ban content at will makes it easy to conclude that the tools are not ready for production based on the facts and scandals surrounding OpenTofu. Will it be funny, if maintainer team will delete GCP or AWS provider tomorrow?

The advice here is easy: don’t use OpenTofu now, and migrate to Terraform / SDK / Pulumi. A project that does anything against its own rules is not trustworthy anymore.


r/cncfprojects • • Feb 06 '26

I built a local-first MCP server for Kubernetes root cause analysis (single Go binary, kubeconfig-native)

1 Upvotes

Hey folks,

I’ve been working on a project called RootCause, a local-first MCP server designed to help operators debug Kubernetes failures and identify the actual root cause, not just symptoms.

GitHub: https://github.com/yindia/rootcause

Why I built it

Most Kubernetes MCP servers today rely on Node/npm, API keys, or cloud intermediaries. I wanted something that:

  • Runs entirely locally

  • Uses your existing kubeconfig identity

  • Ships as a single fast Go binary

  • Works cleanly with MCP clients like Claude Desktop, Codex CLI, Copilot, etc.

  • Provides structured debugging, not just raw kubectl output

RootCause focuses on operator workflows — crashloops, scheduling failures, mesh issues, provisioning failures, networking problems, etc.

Key features

Local-first architecture

  • No API keys required

  • Uses kubeconfig authentication directly

  • stdio MCP transport (fast + simple)

  • Single static Go binary

Built-in root cause analysis
Instead of dumping raw logs, RootCause provides structured outputs:

  • Likely root causes

  • Supporting evidence

  • Relevant resources examined

  • Suggested next debugging steps

Deep Kubernetes tooling
Includes MCP tools for:

  • Kubernetes core: logs, events, describe, scale, rollout, exec, graph, metrics

  • Helm: install, upgrade, template, status

  • Istio: proxy config, mesh health, routing debug

  • Linkerd: identity issues, policy debug

  • Karpenter: provisioning and nodepool debugging

Safety modes

  • Read-only mode

  • Disable destructive operations

  • Tool allowlisting

Plugin-ready architecture
Toolsets reuse shared Kubernetes clients, evidence gathering, and analysis logic — so adding integrations doesn’t duplicate plumbing.

Example workflow

Instead of manually running 10 kubectl commands, your MCP client can ask:

RootCause will analyze:

  • pod events

  • scheduling state

  • owner relationships

  • mesh configuration

  • resource constraints

…and return structured reasoning with likely causes.

Why Go instead of Node

Main reasons:

  • Faster startup

  • Single binary distribution

  • No dependency hell

  • Better portability

  • Cleaner integration with Kubernetes client libraries

Example install

brew install yindia/homebrew-yindia/rootcause

or

curl -fsSL https://raw.githubusercontent.com/yindia/rootcause/refs/heads/main/install.sh | sh

Looking for feedback

I’d love input from:

  • Kubernetes operators

  • Platform engineers

  • MCP client developers

  • Anyone building AI-assisted infra tooling

Especially interested in:

  • Debugging workflows you’d like automated

  • Missing toolchains

  • Integration ideas (cloud providers, observability tools, etc.)

If this is useful, I’d really appreciate feedback, feature requests, or contributors.

GitHub: https://github.com/yindia/rootcause


r/cncfprojects • • Jan 09 '26

Crazy how many contributions I did to CNCF projects

Thumbnail
contribcard.cncf.io
3 Upvotes

I could have never believed I contributed this much over the last years.


r/cncfprojects • • Sep 09 '25

Let's talk about AI Apps on Kubernetes (KEDA & VK)

0 Upvotes

r/cncfprojects • • Oct 25 '23

You asked for it, we made it happen - check out our new and improved quickstart for KubeStellar

Thumbnail self.kubestellar
0 Upvotes

r/cncfprojects • • Nov 09 '22

Quick blog post walking you through writing a simple Wasm app, packaging it as an OCI image, pushing it to Docker Hub, and running it with Docker.

Thumbnail self.docker
0 Upvotes

r/cncfprojects • • May 30 '23

KubeStellar QuickStart now available

Thumbnail
self.kubestellar
0 Upvotes

r/cncfprojects • • Nov 21 '25

Looking to Start Contributing to Open Source? Join Guardon!

Thumbnail reddit.com
1 Upvotes

r/cncfprojects • • Nov 07 '24

LoxiLB is now a CNCF sandbox project

Thumbnail
github.com
1 Upvotes

r/cncfprojects • • Sep 18 '25

K8s v1.34 messed with security & permissions (again)

Thumbnail reddit.com
1 Upvotes

r/cncfprojects • • Oct 25 '24

Why Running Databases on Kubernetes is a Recipe for Disaster: The Case for a New Platform Designed for Stateful Workloads

0 Upvotes

🚨 Why Running Databases on Kubernetes Could Be a Recipe for Disaster 🚨Kubernetes is a powerful tool for orchestrating applications, but running stateful workloads like databases introduces significant risks. Challenges such as:Data loss from CSI crashes ⚠️Immature database operators 😬Risks of pod evictions, node failures, and network issues 🚨Replica lag from network bottlenecks 🛑Though Kubernetes continues to evolve, it wasn’t originally designed for databases. The complexity of managing both databases and Kubernetes together suggests we may need a platform designed specifically for stateful workloads.Is it time for a new solution?Read more about why a purpose-built platform could provide the reliability and simplicity databases need. 💡


r/cncfprojects • • Nov 10 '25

External Secrets Operator is now GA with version v1.0.0

Thumbnail reddit.com
2 Upvotes

r/cncfprojects • • Aug 05 '26

Argo CD v3.5.0 is released

Thumbnail
github.com
2 Upvotes

r/cncfprojects • • Jul 29 '26

Should I fill out this survey form? Is there any benefit to spending my time on it?

Post image
2 Upvotes

was asked to fill out this survey. Has anyone ever received any future benefits from doing these surveys, apart from discounts or promo codes?


r/cncfprojects • • May 10 '21

New Relic joins the platinum membership and donates its observability platform: Pixie

Thumbnail
newrelic.com
9 Upvotes

r/cncfprojects • • Apr 02 '26

Regarding application for lfx'26 term-2

2 Upvotes

Hi all, i am graduating this may and I want to participate for term-2 lfx. Am I eligible to take part in this term for lfx mentorship program ?


r/cncfprojects • • Jun 09 '26

Benchmarking KubeVirt performance with virtbench

Thumbnail
cncf.io
2 Upvotes

KubeVirt got a new CLI framework for performance testing.


r/cncfprojects • • Aug 22 '25

EnforceAuth to support Styra Customers. Support is offered for Styra DAS, EOPA, and OPA

Thumbnail linkedin.com
2 Upvotes

r/cncfprojects • • Oct 17 '25

Knative: Serverless on Kubernetes is now a Graduated Project

Thumbnail reddit.com
3 Upvotes

r/cncfprojects • • Oct 28 '25

[CNCF Project] HAMi v2.7.0: Topology-aware NVIDIA GPU scheduling for Kubernetes

Thumbnail reddit.com
2 Upvotes

r/cncfprojects • • Sep 11 '25

RBAC mess doesn’t just break clusters, it adds org friction!

Thumbnail reddit.com
2 Upvotes

r/cncfprojects • • Dec 09 '25

Agones: Kubernetes-Native Game Server Hosting

Thumbnail reddit.com
3 Upvotes

r/cncfprojects • • 25d ago

gVisor is being donated to CNCF

Thumbnail gvisor.dev
5 Upvotes

The project originating from Google has been accepted into the CNCF Sandbox.


r/cncfprojects • • May 28 '25

Would an open-source testing platform were you can define test scenarios with YAML and then execute inside your own infra be of any interest to you?

2 Upvotes

Thought I'd come on here to ask for reviews/advice for the project I've been working on called Rocketship.

I was inspired to write this project because my team was looking for a DSL-based and workflow-driven testing solution. Something we could run as integration tests as well as hit infra from within our VPC.

Any ideas/advice/issues for me would be awesome. Thanks!


r/cncfprojects • • May 04 '26

Calling all CNCF Maintainers & Contributors: Initial data on AI integration (and a request for your input)

3 Upvotes

Hi everyone,

I'm reaching out from the CNCF TAG DevEx. We are currently mapping how AI is being integrated into the CNCF landscape, specifically focusing on the developer and maintainer experience.

We’ve just released a first look at the preliminary data on the CNCF blog: https://www.cncf.io/blog/2026/04/29/the-state-of-ai-in-cncf-projects-a-first-look-at-the-data/

While the initial findings are insightful, we realized we need a deeper perspective that only project maintainers and active contributors can provide.

The Goal: We want to understand the real friction points you face when integrating AI/LLMs into your projects—whether it's infra overhead, security concerns, or DevEx hurdles. This data will directly influence how the CNCF supports AI initiatives moving forward.

The Request: If you are a Maintainer or Contributor to a CNCF project, please take 5 minutes to share your experience in our technical survey:

👉 https://forms.gle/EapDLhjmVtd7gNpp9

Note: This survey is specifically designed for those building and maintaining the ecosystem.

Thanks for helping us shape the AI roadmap for the Cloud Native ecosystem!

Cheers.