Log in
Progress0 / 30 pages0%
2.
Open Source Projects · Sub-chapter 2 · 4 min read

CNCF

CNCF - Cloud Native Computing Foundation

Sub-chapter 2 of Open Source Projects · Where cloud-native lives

If you've ever run kubectl, scraped a Prometheus metric, configured a Helm chart, or read an OpenTelemetry span - you've touched a CNCF project. CNCF is the sub-foundation of the Linux Foundation that hosts the open-source backbone of how modern software is deployed and observed.

For a forward-deployed engineer, CNCF fluency is table stakes. You will land on customer infrastructure where every piece - orchestration, networking, observability, CI/CD - is a CNCF project. Knowing which project does what, and what shape it is in, lets you debug fast.


TL;DR

  • What - A sub-foundation of the Linux Foundation that hosts cloud-native open-source projects.
  • Founded - July 21, 2015, the day Kubernetes hit 1.0. Google donated Kubernetes as the seed.
  • Project tiers - Sandbox (experimental) → Incubating (production-used) → Graduated (broad adoption + healthy governance).
  • As of writing - ~37 Graduated projects, ~40 Incubating, hundreds in Sandbox.

Why it exists

In 2015, Kubernetes had just hit 1.0 - and Google needed a credible answer to "isn't this just a Google project?". CNCF was announced the same day, with Kubernetes as the seed project and a founding membership that included Red Hat, IBM, Intel, Cisco, Docker, VMware, CoreOS, Mesosphere, and Twitter. By 2018 Google handed full operational control to the CNCF community. Today CNCF is the de-facto neutral ground for the entire cloud-native ecosystem.

Governance - the project lifecycle

This is the part most engineers don't fully understand and should.

text
              ┌──────────────┐
   apply →    │   SANDBOX    │   experimental, early
              └──────┬───────┘
                     │ (vote by TOC)
                     ▼
              ┌──────────────┐
              │  INCUBATING  │   in production at multiple companies
              └──────┬───────┘
                     │ (vote by TOC)
                     ▼
              ┌──────────────┐
              │  GRADUATED   │   broad adoption + healthy governance
              └──────────────┘

The Technical Oversight Committee (TOC) decides which projects are accepted at Sandbox and promoted up tiers. Graduation requires:

  • Broad adoption (committers from multiple companies, large end-user base)
  • Healthy contributor velocity (not one company's part-time project)
  • A passing OpenSSF Best Practices badge
  • Code, documentation, and governance maturity

When you read about a project being "CNCF Incubating," that's a signal about its production readiness - not just hype.

Projects you'd recognise

All Graduated unless noted:

ProjectWhat it does
KubernetesContainer orchestration; the foundational project
PrometheusMetrics and time-series monitoring
EnvoyHigh-performance L7 proxy used in most service meshes
etcdDistributed key-value store; backs Kubernetes state
HelmPackage manager for Kubernetes ("apt for K8s")
OpenTelemetryVendor-neutral standard for traces, metrics, logs
ArgoWorkflows, CD (GitOps), Events, Rollouts
gRPCHigh-performance RPC framework (Incubating, often misremembered as Graduated)
containerdContainer runtime (under-the-hood of Docker, k8s)
Istio / LinkerdService meshes (both Graduated)
FalcoRuntime security
CiliumeBPF-based networking
Jaeger / Fluentd / cert-managerTracing / logs / TLS automation

The full live list is at cncf.io/projects - bookmark it and check graduation tiers before you bet your stack on a project.

How a beginner contributes

  1. Start at contribute.cncf.io. Each project (e.g., Kubernetes SIGs) has its own onboarding flow.
  2. Pick a SIG. Kubernetes has dozens - SIG-Apps, SIG-Network, SIG-Node, SIG-Docs, etc. Match to your interest.
  3. Attend SIG meetings. They're public, on YouTube + Zoom. Read the meeting notes for two weeks before showing up.
  4. First issue. Filter by good first issue and help wanted labels.
  5. Apply to mentorship. CNCF participates in LFX Mentorship (same platform as the Linux Foundation chapter) and Google Summer of Code.
  6. Attend KubeCon + CloudNativeCon - diversity/need-based scholarships are real and meaningful.

CNCF mentoring programs

  • LFX Mentorship - multiple terms per year. CNCF projects post mentorship slots; you apply via LFX.
  • Google Summer of Code - annual, summer. CNCF is a regular organisation.
  • Hosted at github.com/cncf/mentoring.

Hands-on Checkpoints

  • Open cncf.io/projects. Note three Graduated, three Incubating, three Sandbox projects you didn't know existed.
  • Pick a CNCF project you use daily. Skim its CONTRIBUTING.md and pick one good first issue.
  • Join CNCF Slack. Lurk in the project's channel for one week before posting.
  • Watch the next public SIG meeting recording for that project (they're on the CNCF YouTube channel).
  • Find an upcoming KubeCon. Check whether scholarships are open.

Further reading

Welzin opinion: Every Welzin customer deployment is some constellation of CNCF projects. Knowing which projects, which tier, and which SIG runs each one is one of the highest-leverage things a forward deployed engineer can learn. Pick a project from the Graduated list and read every line of its CONTRIBUTING.md this week.

Knowledge check

Pass 80% to unlock
0/1 answered
Which project is the flagship of the CNCF?