CNCF
CNCF - Cloud Native Computing Foundation
Sub-chapter 2 of Open Source Projects · Where cloud-native lives
If you've ever run kubectl, scraped a Prometheus metric, configured a Helm chart, or read an OpenTelemetry span - you've touched a CNCF project. CNCF is the sub-foundation of the Linux Foundation that hosts the open-source backbone of how modern software is deployed and observed.
For a forward-deployed engineer, CNCF fluency is table stakes. You will land on customer infrastructure where every piece - orchestration, networking, observability, CI/CD - is a CNCF project. Knowing which project does what, and what shape it is in, lets you debug fast.
TL;DR
- What - A sub-foundation of the Linux Foundation that hosts cloud-native open-source projects.
- Founded - July 21, 2015, the day Kubernetes hit 1.0. Google donated Kubernetes as the seed.
- Project tiers - Sandbox (experimental) → Incubating (production-used) → Graduated (broad adoption + healthy governance).
- As of writing - ~37 Graduated projects, ~40 Incubating, hundreds in Sandbox.
Why it exists
In 2015, Kubernetes had just hit 1.0 - and Google needed a credible answer to "isn't this just a Google project?". CNCF was announced the same day, with Kubernetes as the seed project and a founding membership that included Red Hat, IBM, Intel, Cisco, Docker, VMware, CoreOS, Mesosphere, and Twitter. By 2018 Google handed full operational control to the CNCF community. Today CNCF is the de-facto neutral ground for the entire cloud-native ecosystem.
Governance - the project lifecycle
This is the part most engineers don't fully understand and should.
┌──────────────┐
apply → │ SANDBOX │ experimental, early
└──────┬───────┘
│ (vote by TOC)
▼
┌──────────────┐
│ INCUBATING │ in production at multiple companies
└──────┬───────┘
│ (vote by TOC)
▼
┌──────────────┐
│ GRADUATED │ broad adoption + healthy governance
└──────────────┘
The Technical Oversight Committee (TOC) decides which projects are accepted at Sandbox and promoted up tiers. Graduation requires:
- Broad adoption (committers from multiple companies, large end-user base)
- Healthy contributor velocity (not one company's part-time project)
- A passing OpenSSF Best Practices badge
- Code, documentation, and governance maturity
When you read about a project being "CNCF Incubating," that's a signal about its production readiness - not just hype.
Projects you'd recognise
All Graduated unless noted:
| Project | What it does |
|---|---|
| Kubernetes | Container orchestration; the foundational project |
| Prometheus | Metrics and time-series monitoring |
| Envoy | High-performance L7 proxy used in most service meshes |
| etcd | Distributed key-value store; backs Kubernetes state |
| Helm | Package manager for Kubernetes ("apt for K8s") |
| OpenTelemetry | Vendor-neutral standard for traces, metrics, logs |
| Argo | Workflows, CD (GitOps), Events, Rollouts |
| gRPC | High-performance RPC framework (Incubating, often misremembered as Graduated) |
| containerd | Container runtime (under-the-hood of Docker, k8s) |
| Istio / Linkerd | Service meshes (both Graduated) |
| Falco | Runtime security |
| Cilium | eBPF-based networking |
| Jaeger / Fluentd / cert-manager | Tracing / logs / TLS automation |
The full live list is at cncf.io/projects - bookmark it and check graduation tiers before you bet your stack on a project.
How a beginner contributes
- Start at contribute.cncf.io. Each project (e.g., Kubernetes SIGs) has its own onboarding flow.
- Pick a SIG. Kubernetes has dozens - SIG-Apps, SIG-Network, SIG-Node, SIG-Docs, etc. Match to your interest.
- Attend SIG meetings. They're public, on YouTube + Zoom. Read the meeting notes for two weeks before showing up.
- First issue. Filter by
good first issueandhelp wantedlabels. - Apply to mentorship. CNCF participates in LFX Mentorship (same platform as the Linux Foundation chapter) and Google Summer of Code.
- Attend KubeCon + CloudNativeCon - diversity/need-based scholarships are real and meaningful.
CNCF mentoring programs
- LFX Mentorship - multiple terms per year. CNCF projects post mentorship slots; you apply via LFX.
- Google Summer of Code - annual, summer. CNCF is a regular organisation.
- Hosted at github.com/cncf/mentoring.
Hands-on Checkpoints
- Open cncf.io/projects. Note three Graduated, three Incubating, three Sandbox projects you didn't know existed.
- Pick a CNCF project you use daily. Skim its
CONTRIBUTING.mdand pick onegood first issue. - Join CNCF Slack. Lurk in the project's channel for one week before posting.
- Watch the next public SIG meeting recording for that project (they're on the CNCF YouTube channel).
- Find an upcoming KubeCon. Check whether scholarships are open.
Further reading
- CNCF home
- All projects + tiers
- Contributor hub
- Mentoring programs
- Slack invite
- KubeCon (next event)
- TOC governance
Welzin opinion: Every Welzin customer deployment is some constellation of CNCF projects. Knowing which projects, which tier, and which SIG runs each one is one of the highest-leverage things a forward deployed engineer can learn. Pick a project from the Graduated list and read every line of its
CONTRIBUTING.mdthis week.