云计算
云原生、基础设施与企业落地
The sandbox wasn’t enough: Why AI agent governance requires runtime observability
Models running an OpenAI cybersecurity evaluation reached the public Internet from an environment designed to be isolated. Package installation through
The AI observability race will be won on interoperability
The AI race is often measured by model quality, speed, and token cost. For business leaders, those measures contribute to
18 分钟 · The New Stack
Isolation. Security. Scale.
Without these three things, Agents cannot be properly implemented in a controlled environment, they will not have policy enforcement to ensure they do what they’re supposed to do, and there’s zero way of ensuring that t…
19 分钟 · CNCF BlogLATEST STORIES
最新内容
Is Kubernetes ready for AI agents?精选导读
Kubernetes was built around a fairly simple assumption. It’s that software does what its developers told it to do. AI
AWS says its AI security agent fixes 89% of bugs — but there’s a catch精选导读
AWS made Continuum for code vulnerabilities generally available on Thursday. The service finds and validates bugs in your repositories, checks
Building an agentic software factory? Start with the sensor.精选导读
A gap has long existed between the shipping velocity of the best engineering teams and the rest of the bell
Why Kubernetes autoscalers keep fighting each other (and why the solution must be autonomous)精选导读
Ask an SRE a deceptively simple question: What is the right size for checkout-api, and how many replicas should it
Before you expand your GPU pool, measure the outcome精选导读
For teams running AI workloads on Kubernetes, a fully allocated GPU pool and a growing batch-job queue might make expanding
Vercel sets a deadline for vendors to move beyond long-lived keys精选导读
Vercel wants to eliminate long-lived API keys from its ecosystem. It is giving Marketplace vendors until January 2027 to offer
AI jobs are waiting while GPUs sit idle. Kubernetes has a new plan.精选导读
Welcome to another edition of Road to KubeCon! We’re tracking movements in the Kubernetes and cloud-native ecosystem as we count
Origin Range Requests: Serving large files without range-request tuning精选导读
Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to coordinate partial fetches automatically, cutting R2 p99 latency in half.
Bringing post-quantum cryptography to geographically fenced key management精选导读
Cloudflare's new post-quantum GeoKey Manager protects geographically fenced decryption keys from harvest now, decrypt later attacks. Learn how we redesigned our cryptography stack to support strict data sovereignty in a…