CNCF

CNCF at Beyond Market Intelligence is a file of 6 stories. The newest of them: “Docker brings AI agent permissions to the CNCF as portable container images”, “Kubernetes 1.37 arrives with a sharper focus on AI workloads”, and “Kubeflow Advances AI Toolkit Ahead of Cloud Native Foundation Milestone”. Docker is making AI agent permissions as portable as the agents themselves by bringing the Sandbox Kit Specification to the CNCF. Kubernetes 1.37, named "Garhwal," lands with a clear focus on stability, security, and AI/ML workloads. Acme AI is the next-generation, AI-powered spreadsheet platform built to replace Excel and redefine how analysts, data scientists, and enterprise teams work… The list below is every CNCF story on Beyond Market Intelligence, newest first.

Docker brings AI agent permissions to the CNCF as portable container images
InfoQ

Docker brings AI agent permissions to the CNCF as portable container images

Docker is making AI agent permissions as portable as the agents themselves by bringing the Sandbox Kit Specification to the CNCF. This move treats what an AI can access like a container image, something you can pack up and move anywhere. It's a practical step toward trust and flexibility in agentic workflows. For another look at how AI is reshaping practical tools, read our piece on Shopify's Canvas builder.

Kubernetes 1.37 arrives with a sharper focus on AI workloads
InfoQ

Kubernetes 1.37 arrives with a sharper focus on AI workloads

Kubernetes 1.37, named "Garhwal," lands with a clear focus on stability, security, and AI/ML workloads. The Stable Metrics API is a welcome step, giving teams reliable data for smarter scaling decisions. Meanwhile, the Rootless Kubelet reaching beta signals a serious commitment to safer, more contained operations. This release feels less about flash and more about hardening the foundation. For those wrestling with evolving AI/ML job demands, our related article on navigating that skill shift is worth a look.

Kubeflow Advances AI Toolkit Ahead of Cloud Native Foundation Milestone
InfoQ

Kubeflow Advances AI Toolkit Ahead of Cloud Native Foundation Milestone

Kubeflow's latest updates land with a clear purpose: making distributed AI on Kubernetes feel less like a heavy lift and more like a natural step forward. Kale 2.0's native Spark support and the expanded Trainer capabilities signal a project that's maturing with intent, not just adding features. As it nears Cloud Native Computing Foundation graduation, the momentum feels earned. If you're weighing how these shifts affect your own AI/ML workflows, our piece on *Navigating AI/ML Job Requirements* offers a practical counterpoint on the skills side.

Fleet-wide container security starts with a single hardened builder
InfoQ

Fleet-wide container security starts with a single hardened builder

The container security control point is moving. Cloud Native Buildpacks, which graduated within the CNCF in July 2026, pull base image selection out of per-service Dockerfiles and place it into a single builder owned by platform engineering. That shift enables fleet-wide patching without touching individual apps. BellSoft's hardened Paketo builder shows vendors now treat the builder as the security boundary. It is a practical response to a real operational problem. For more on how the ecosystem is adapting, our coverage of Kubernetes 1.

Cloud native foundations unlock the future of agentic AI systems
InfoQ

Cloud native foundations unlock the future of agentic AI systems

The Cloud Native Computing Foundation makes a compelling case that agentic AI's foundation is already here. Rather than chasing entirely new systems, this analysis points to the mature cloud-native ecosystem as the backbone for trustworthy AI agents. It is a grounded perspective that prioritizes reliability over novelty. For those questioning how AI fits into existing workflows, the discussion echoes themes from our related piece, "Verify Your AI's Understanding: A Simple Check for Tax Season." We find this a practical, forward-looking take on a complex shift.

Smarter Traffic Management and Greater Efficiency with Linkerd 2.20
InfoQ

Smarter Traffic Management and Greater Efficiency with Linkerd 2.20

Linkerd 2.20 lands with sharper traffic management and meaningful efficiency gains, reinforcing why the CNCF-graduated service mesh remains a compelling lightweight choice for Kubernetes networking. The updates feel purposeful, targeting performance and observability without adding unnecessary complexity. For teams tired of wrestling with heavier meshes, this release invites a simpler path forward. If adaptive systems intrigue you, Mallika Rao's insights on real-world recommendations pair well with this momentum. Explore Linkerd's latest strides, and see how smarter routing can lighten your operational load.