Search

cncf.io › blog › 2026 › …

The Kubernetes integration tax: Prometheus, Cilium and production reality

… When Prometheus upgrades break your custom rules, the diff is immediate, and the fix is testable before it reaches production. Embed NetworkPolicies in charts, not in post-deployment runbooks. We ship Cilium NetworkPolicy templates inside 20+ Helm charts. …

May 28, 2026

cncf.io › blog › 2026 › …

Introducing Prempti: Policy and visibility for AI coding agents

… The default ruleset covers six areas: Working-directory boundary — monitor and ask on file access outside the session’s project directory Sensitive paths — deny reads and writes to /etc/, ~/.ssh/, ~/.aws/, cloud credentials, .env files, and similar Sandbox disable — detect attempts to disable the a… …

May 20, 2026