Skip to main content

Letter P Journey

Exploring essential CNCF projects for this week's letter.

Ai Agent Agent Framework

AI Agent Framework, the Pydantic way

Ai Agent Evaluation

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

App Definition and Development Application Definition Image Build

Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.

sandbox

An open-source tool for developers to work with containers and Kubernetes with an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from the desktop.

sandbox

Porter enables you to package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and install with a single command

App Definition and Development Continuous Integration Delivery

sandbox

GitOps style continuous delivery platform that provides consistent deployment and operations experience for any applications

App Definition and Development Database

App Definition and Development Streaming Messaging

Cnai Automl

Cnai Ci Cd Delivery

Cnai Data Architecture

A distributed SQL query engine for big data.

A distributed pub-sub messaging system.

Cnai Data Science

Cnai Distributed Training

DistributedDataParallel (DDP) implements data parallelism at the module level which can run across multiple machines.

Cnai General Orchestration

Cnai Governance Policy Security

Permify is an open source authorization system for creating secure, scalable and flexible access control systems for Services, LLMs, Applications and AI native solutions. Permify frequently used for Enterprise RAG systems, Internal applications, Customer facing SaaS tools, and LLM services.

Cnai Ml Serving

Cnai Model Llm Observability

Cnai Open Enterprise Ai Blueprints

Cnai Vector Databases

Cnai Workload Observability

Cncf Members Academic

Cncf Members End User Supporter and Contributor

Cncf Members Gold

Cncf Members Nonprofit

Cncf Members Platinum

Cncf Members Silver

Data Data Science

Observability and Analysis Chaos Engineering

Observability and Analysis Continuous Optimization

Observability and Analysis Feature Flagging

Observability and Analysis Observability

Parseable is a free and open source log storage and observability platform. Written in Rust, Parseable can be deployed on natively on Kubernetes. It ingests log data via HTTP POST calls and exposes a query API to search and analyze logs. It is compatible with logging agents like FluentBit, LogStash, FileBeat among others.

sandbox

Perses is a dashboard tool to visualize observability data from Prometheus/Thanos/Jaeger.

sandbox

Open source Kubernetes observability for developers

Orchestration Management Api Gateway

Orchestration Management Coordination Service Discovery

Orchestration Management Remote Procedure Call

Orchestration Management Scheduling Orchestration

Orchestration Management Service Mesh

Orchestration Management Service Proxy

Pipy is a programmable proxy for the cloud, edge and IoT. It's written in C++, which makes it extremely lightweight and fast. It's also fully programmable by using PipyJS, a tailored version from the standard JavaScript language.

Platform Certified Kubernetes Ai Platform

Platform Certified Kubernetes Distribution

Platform Certified Kubernetes Hosted

Platform Certified Kubernetes Installer

Provisioning Container Registry

Provisioning Key Management

Provisioning Security Compliance

sandbox

Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure and Zero trust Kubernetes with zero friction.

sandbox

Platform AbstRaction for SECurity service

Permify is an open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

Pipelock is an open-source AI agent firewall. It sits between AI agents and the internet and blocks secret leaks (DLP), SSRF, unsafe tool traffic, and prompt-injection content across HTTP, WebSocket, and MCP transports. It adds MCP-specific defenses for tool-baseline drift and rug-pull detection, and supports Ed25519-signed action receipts plus Audit Packet v0 bundles that can be verified offline with a standalone Go verifier and TypeScript, Rust, and Python verifier ports. Single Go binary, fail-closed defaults, Apache 2.0.

Pomerium is an identity-aware access proxy that enables teams to implement true zero-trust security, eliminating the need for a VPN. Pomerium ensures that every single call is authenticated and authorized, providing a secure and seamless user experience.

Runtime Cloud Native Network

Runtime Cloud Native Storage

sandbox

The Piraeus Operator manages LINSTOR clusters in Kubernetes.

Runtime Container Runtime

sandbox

A set of tools providing full management of container lifecycle, including Podman, Buildah, and Skopeo, which manage containers and images without requiring a daemon or root privileges.

Serverless Framework

Serverless Hosted Platform

Serverless Installable Platform

Serverless Security

Serverless Tools

Special Certified Cnfs

Special Kubernetes and Cloud Native Training Partner

Special Kubernetes Certified Service Provider

Training Distributed Training

DistributedDataParallel (DDP) implements data parallelism at the module level which can run across multiple machines.

Wasm Ai Machine Learning

Wasm Application Frameworks

Wasm Debugging Observability

Wasm Decentralized Platforms

Wasm Edge Bare Metal

Wasm Embedded Functions

Wasm Hosted Platforms

Wasm Languages

Pyodide is a Python distribution for the browser and Node.js base WebAssembly

Wasm Orchestration Management

Wasm Packaging Registries Application Delivery

Wasm Runtimes

Wasm Tooling