Back to Programs

Data

CNCF

Building sustainable ecosystems for cloud native

OpenTelemetrydevopsenvoykubernetesprometheus
Organization website

Participation history

10 GSoC years

2026202520242023202220212020201920182017

2026

5 projects

Official year page

Benchmarking and Performance Evaluation of Inference Routing Extensions in kgateway

kgateway routes AI inference traffic to self-hosted model servers. It picks the best server using EPP scoring — based on KV cache usage, queue depth,...

Project page

kpt: Build e-commerce example kpt package

Currently, while kpt is a highly capable tool for declarative Kubernetes management, its official examples rely heavily on complex, specialized...

Project page

Reactive Agents with Drasi & Dapr

Agentic AI is commonly used to predict and resolve problems before they occur, requiring access to data in near real-time. However, traditional...

Project page

OSCAL Document Signing and Verification in compliance-trestle

This project adds signing and verification for OSCAL JSON artifacts in compliance-trestle so generated documents can be verified in CI/CD and...

Project page

Alternative Progressive Delivery for Deployment in OpenKruise Rollout

The current OpenKruise Rollout implementation for Deployment progressive delivery mutates the updateStrategy to Recreate, creating a dangerous risk...

Project page

2025

11 projects

Official year page

Real-Time Policy Evaluation in Meshery UI using OPA WebAssembly

Abstract: This proposal outlines a plan to enhance Meshery's relationship evaluation capabilities by implementing client-side policy evaluation using...

CodeProject page

Automating Benchmarking of KubeStellar Data-Plane for AI Workloads

Problem: KubeStellar (KS) lacks an automated system to measure and visualize data-plane performance (e.g., sync latencies) under AI workloads, making...

CodeProject page

Allow Kubewarden Policies to be Written using JavaScript

Kubewarden is a universal policy engine for Kubernetes enabling policy-as-code. It allows users to define and enforce policies for their Kubernetes...

CodeProject page

Virtual filesystem security for WasmEdge plug-ins with exporting WASI APIs - Proposal

This project aims to enhance the security of WasmEdge plug-ins by exporting key WASI APIs, thereby ensuring a robust and secure virtual filesystem...

CodeProject page

Knative: Functions AI Agent Callbacks

This project aims to integrate AI agents with Knative Functions by developing a MCP server that allows to dynamically create and deploy functions...

CodeProject page

Simplified SPM deployment with ElasticSearch/OpenSearch for Jaeger

Jaeger’s Service Performance Management (SPM) currently requires a complex setup with a separate processor and Prometheus storage to compute RED...

CodeProject page

Generic High-Performance Caching Library for etcd

etcd is a distributed key-value store that serves as the backbone for Kubernetes and other cloud-native systems, storing critical configuration and...

CodeProject page

Privacy-preserving and efficient AI model training across multi-clusters

This project aims to enable AI training in a multi-cluster environment while ensuring data privacy through federated learning. In a multi-cluster...

CodeProject page

Enhancements for RAG Chatbot for Vitess

The current Vitess RAG chatbot which uses documentation, Slack discussions, and GitHub issues data, has low accuracy. This project aims to improve...

CodeProject page

Lima: Support for Virtual Machine Plugin Subsystem

Lima(LInux MAchines) is a tool that helps to run Linux Virtual Machines on macOS and other hosts, with a focus on running containers on them with...

CodeProject page

Kubebuilder: Automating Operator Maintenance - Driving Better Results with Less Overhead

This project aims to create a GitHub Action similar to Dependabot for Kubebuilder, automating the process of regenerating scaffolds and preserving...

CodeProject page

2024

11 projects

Official year page

Kubernetes Gateway API: Design and develop notification mechanism for ingress2gateway.

Ingress2gateway is a tool to help users migrate and convert Ingress, and implementation-specific configurations to Gateway API. As we add more...

CodeProject page

Move out of gogo/protobuf to protobuf with vtproto implementation

We propose transitioning from the deprecated gogo/protobuf to Vitess's vtproto as part of an effort to modernize Prometheus's codebase. The migration...

CodeProject page

Building a KubeArmor Extension for Rancher Manager

This project aims to create a user-friendly way to manage essential KubeArmor security functions from within the Rancher Manager interface. This will...

CodeProject page

Improving WASM Support in Knative Functions

In a single Knative Functions command, we aim to abstract the entire process of building serverless functions using WebAssembly (WASM)—from compiling...

CodeProject page

Open Cluster Management: Scheduling AI workload in multi-clusters

Enhance Open Cluster Management (OCM) to efficiently schedule AI workloads across multiple Kubernetes clusters by optimizing the use of GPU/TPU...

CodeProject page

Implementing Coredump for Post-Mortem Debugging in WebAssembly

This project aims to implement wasm-coredump, to enhance the debugging capabilities of WebAssembly by implementing a coredump feature for post-mortem...

CodeProject page

KubeArmor: Automating Benchmarking Workflow

The project aims to develop an automated benchmarking system for KubeArmor to enhance the efficiency and repeatability of performance evaluations. By...

CodeProject page

Service Mesh Performance

The Objective of this project is to develop IDE plugins that can enhance the developer experience while working with Service Mesh Performance...

CodeProject page

CNCF GOSST Collaboration - Enhancing Security Across CNCF Ecosystem

The Cloud Native Computing Foundation (CNCF) hosts a diverse ecosystem of cloud-native projects. Ensuring the security of these projects is paramount...

CodeProject page

Falco: Upgrading event-generator and automating Falco performance testing

This project aims to upgrading the event-generator to improve its testing and bench-marking capabilities, its reliability, and its consistency, and...

CodeProject page

Prometheus: Continued support for created timestamps

This project aims to advance the support for _created lines, or Created Timestamps, in Prometheus. Building on the groundwork laid during GSoC 2023...

CodeProject page

2023

14 projects

Official year page

Support OpenMetrics _created timestamp in Prometheus

The proposal consists in treating the time series creation time as another metadata. We propose a few incremental improvements that can be released...

CodeProject page

Add Support for SQL Database Storage in CurveBS

CurveBS currently use etcd as metadata storage but etcd has limited scalability, and the amount of metadata that can be stored is limited.So i plan...

CodeProject page

Enhancements for Dockerfiles

Build out samples and workflows showing how to use Dockerfiles in harmony with a cloud native buildpacks platform. Need to update the pack...

CodeProject page

Dataplane migration for Apache Kafka communications: Leveraging Java19’s Project Loom.

Overview: In the current scenario, the Knative Eventing Kafka Broker's data-plane communication with Apache Kafka for consuming and producing records...

CodeProject page

Kubebuilder phase 2 plugin

The introduction of external plugin extends the functionality of the Kubebuilder CLI tool by allowing users to create and use custom plugins. These...

CodeProject page

Jaeger: Make ClickHouse a core storage backend

This project aims at leveraging the current community jaeger-clickhouse storage plugin and making ClickHouse one of the core storage backend for...

CodeProject page

GitHub Actions for KubeArmor

Our goal is to create a Github Action from KubeArmor, which will be used by other Github projects. This Github Action, using KubeArmor, will be used...

CodeProject page

Conmon-rs support for podman

Running containers with podman using conmon-rs as the container monitor. This requires additional features to be implemented in conmon-rs and an...

CodeProject page

Streamlined OpenFeature Enhancement Proposal Process

Streamlining the OFEP process for enhancing community engagement through automation scripts by doing almost everything they can, from creating...

CodeProject page

Timeframe for Metrics

Currently, the Metrics Controller in the Keptn Lifecycle Toolkit only allows querying a single value per metric. This project will enable users to...

CodeProject page

Falco: Web IDE for Security Rules with WebAssembly

This project aims to improve Falco's capabilities by adding WebAssembly as a new officially-supported compilation target. The objective is to create...

CodeProject page

Kubectl plugin for Armada

The proposal deals with the problem of the creation of a kubectl plugin for Armada, the creation of the desired plugin will allow users to...

CodeProject page

Prototyping Support for Content Addressable Systems like IPFS in TUF

The TUF specification provides explicit guidelines for how artifacts should be hashed and later verified to guarantee their integrity. However,...

CodeProject page

IDE Plugins for editing vela applications

One possible way to use the Kubernetes API to connect to the KubeVela Control Plane in the background and fetch the required information like...

CodeProject page

2022

16 projects

Official year page

in-toto: DSSE Implementation

in-toto framework generates metadata files that are represented as signature wrapper or envelope. in-toto current signature wrapper requires...

CodeProject page

Normalize TiKV Java client for TiSpark

TiSpark maintains a com.pingcap.tikv/tikv-client module. It is a fork of the current official tikv-client legacy version. The difference from the...

CodeProject page

Implement WASI and wasmedge_process host functions on Windows

WebAssembly has become extremely popular among the developer community lately. It offers near native performance in a browser and is meant to not be...

CodeProject page

RPC cross different namespaces through unix socket

The chaos-daemon component of Chaos Mesh manages many subprocesses to inject faults into other containers(Linux namespaces), and we need to...

CodeProject page

Standardize Cache Flag options for pack CLI

Introduce a new variadic flag to the Pack CLI that enables configuring different cache types geared towards app developers or operators that are...

CodeProject page

A Grafana Dashboard Plugin to Observe Controller Metrics

This project aims to provide unified Grafana dashboards to visualize K8s controller/operator status based on Kubebuilder. In general, users have to...

CodeProject page

Add SLSA provenance support to in-toto-rs and rebuilderd

Rebuilderd is a verification system for binary packages. It repeates the build process of a package in an identical environment and verifies that the...

CodeProject page

New Golang plugin to help Operator authors skill up

This proposal defines a new plugin that allows users to get the scaffold with the required code to have a project that will deploy and manage an...

CodeProject page

Single binary deployment outside kubernetes environment.

Chaos Mesh supports injecting errors into the physical machine through PhysicalMachineChaos. However, deploying it outside the Kubernetes cluster is...

CodeProject page

Tooling to deploy and cross-configure cert-manager with external dependencies by Terraform

Design and create Terraform modules framework that is benefit to extension and reusability to easily install and configure cert-manager, associated...

CodeProject page

KubeArmor Observability and Policy Discovery Helper Tool

Running Kubernetes should be done with the utmost security in mind. KubeArmor provides a policy based system to increase the quality of security in a...

CodeProject page

CNCF Cluster: Performance Benchmarking

The Service Mesh Performance standard captures and characterizes infrastructure capacity, service mesh configuration, and workload metadata. When we...

CodeProject page

CoreDNS: Add ACME protocol support for certificate management into TLS plugin

When using CoreDNS to serve DNS traffic over TLS/HTTPS certificates have to be managed (created and renewed) manually. The goal of my project is to...

CodeProject page

Implementing TAP(TUF Augmentation Proposal) 14 for python’s reference implementation

Implementing version management for TUF’s python reference implementation. The implementation does not currently have a way to migrate TUF...

CodeProject page

in-toto: Add provenance extension to Jenkins plugin

In-toto is a framework designed to protect software supply chain integrity. It provides security against attackers who can get control of a step in...

CodeProject page

Expand Service Mesh Patterns catalog

Create a centralized catalog of Patterns, WebAssembly filters and eBPF programs which let's the user import, edit and deploy patterns.The Service...

CodeProject page

2021

16 projects

Official year page

TiKV: High-performance Data Import Tool

Lightning is a tool used to import large amounts of data into TiDB. In addition to the logic of preparation and improving performance, the main logic...

CodeProject page

CNCF - CNB - Jenkins Plugins

Cloud Native Buildpacks' primary function is to turn source code into a runnable image and because of that it's natural for it to be used within...

CodeProject page

TLA+ Spec for Async Commit

The goal of this project is to offer a formal verification using TLA+ for TiKV’s new “Async Commit” transaction model, which brings us more...

CodeProject page

Make it easy to install and verify the installation of cert-manager

cert-manager can be installed using Helm or with regular Kubernetes manifests, but when using regular manifests it is difficult to customize the...

CodeProject page

SMI Support for Multi-Cluster Operations

Currently, SMI doesn’t provide connectivity over multiple Kubernetes clusters. It is becoming common for users of a service mesh to have more than...

CodeProject page

[Litmus Portal] Authentication Module Refactor and OAuth Implementation

The Authentication server of the litmus portal (which resides in the litmus-portal folder of the main litmus repository) is written in golang, uses...

CodeProject page

Improve the usability of cert-manager on multiple cloud providers

cert-manager is a Kubernetes add-on used extensively to automate the management and issuance of certificates from various issuers. This project aims...

CodeProject page

Cloud Native Buildpacks [CNCF] Project: Automatic Buildpack Registry Action Updates

Buildpacks are pluggable tools that can be used to transform the source code to OCI compliant images (Docker images) that can run on any cloud. It is...

CodeProject page

web-based simulator for scheduler behaviour (Project: Kubernetes)

In real Kubernetes, we cannot know the results of scheduling in detail without reading the logs, which usually requires privileged access to the...

CodeProject page

Buildpacks Lifecycle Prepare Phase

Buildpacks are a kind of framework for preparing a container environment for your apps. Lifecycle is a particular workload that needs to run one by...

CodeProject page

Adaptive Load Control and Distributed Load Testing of Envoy Data Planes

Users configuring their Envoy-based data planes don't know how to find the optimal Envoy configuration given their workload's resiliency and...

CodeProject page

Merge Crossplane/OAM-Runtime with KubeVela by specify version

Open Application Model [OAM] is a runtime-agnostic specification for defining cloud native applications and enabling building app-centric platforms...

CodeProject page

Develop in-toto-rs (Rust) for integration with rebuilderd

Description: rebuilderd is a verification system for binary packages. It repeats the build process of a package in an identical environment and...

CodeProject page

OpenEBS: Update mount-points and capacity of Block Devices without restarting NDM

The Node Disk Manager (NDM) daemonset runs on every node in the Kubernetes cluster, discovers and monitors various storage devices connected to the...

CodeProject page

Automated, Granular TLS client support in Thanos

Thanos Querier component supports basic TLS configuration for internal gRPC communication. This works great for basic use cases but it still requires...

CodeProject page

Smart automation for project documentation and website

This project aims to build and implement mdox, a documentation automation CLI tool, which can keep project documentation completely up-to-date by...

CodeProject page

2020

17 projects

Official year page

Cloud Storage

A cloud computing is a set of huge networks and computing nodes, where enormous amount of data flow takes place. An efficient performance is needed...

CodeProject page

Versioned rawKV

Versioned key-value data management interface for TiKV

CodeProject page

Anomaly Detection of the CoreDNS Server through Machine Learning

This project aims to try and detect anomalies that occur in a CoreDNS server using a machine learning model developed in Keras. This project would...

CodeProject page

Cloud Native KV-service

To create a Cloud Native TiKV implementation which utilises a Cloud Platform's remote provisions to augment the current local only storage back-end...

CodeProject page

Develop local cluster provider for test-infa/prombench and extending test-infra

This project aims is to work on the following issues: Develop local cluster provider (KIND) Deployment of Prombench on EKS and local cluster Resolve...

CodeProject page

Selectively disable Indexing of labels

Prometheus is one of the standard-bearing open-source solutions for monitoring and observability. As a Prometheus-as-a-Service platform, Cortex fills...

CodeProject page

Port runlib into in-toto golang

in-toto is a project for protecting supply chain integrity. The project is a sister project of the TUF project and both are there for tightening the...

CodeProject page

Rewrite NFS Operator to use controller-runtime

This project aims to implement controller-runtime for Rook nfs-operator and addresses several issues along with it. Currently, Rook nfs-operator only...

CodeProject page

Per Series Metric Retention - Thanos

Thanos is allowing storing metrics for long, if not unlimited time. Currently however there is no fine-granular process of retaining only some...

CodeProject page

Kubernetes Multitenancy Working Group: Benchmarks

The Kubernetes Multi-Tenancy Working Group is chartered with exploring and defining multi-tenancy models for Kubernetes. The Multi Tenancy Benchmarks...

CodeProject page

Cluster Addons: Package all things!

Cluster Addons are resources that are considered inherently part of the Kubernetes cluster as they help extend the functionality of the cluster. Over...

CodeProject page

Prometheus - Running prombench on EKS and update dashboards

Prombench is the automated E2E testing and benchmarking for Prometheus. Prombench uses Kubernetes to benchmark Prometheus using various scalable...

CodeProject page

Distributed Load Testing of Envoy Data Planes

Many performance benchmarks are limited to single instance load generation (single pod load generator). This limits the amount of traffic that can be...

CodeProject page

SMI Conformance Tool

Currently, there exists no software solution for checking whether a service mesh implements Service Mesh Interface or not. This causes the following...

CodeProject page

Prometheus: Extending promtool for formatting PromQL expressions and YAML structure in rules files

Prometheus is a monitoring tool that monitors the specified targets, scrapes the system and application metrics at regular intervals, evaluates rules...

CodeProject page

Enriching and Extending Thanos UIs with React for Awesome User Experience

So far Thanos has successfully used pieces of old Prometheus UI with some improvements. However, since Prometheus now moved all UI pages to React, it...

CodeProject page

Do resource delivery around Kubernetes

Resource Provision: Use CRD Operator to invoke the cloud resource and create the resource object. Resource Binding: Use Service binding to do the...

CodeProject page

2019

15 projects

Official year page

Add support for the OCI runtime spec by implementing a runc stage2

rkt implements the App Container Executor specification of the appc Container Specification and uses systemd unit properties to implement its...

CodeProject page

Kubernetes with hardware devices topology awareness at node level

We would like to propose a improvement on current Kubernetes topology manager to become aware of generic hardware device topology at node level, so...

CodeProject page

Falco engine performance analysis and optimization

The outcome of this project has been the development of a tracing framework that allows to measure and monitor some Falco internal metrics (counter...

CodeProject page

Prometheus - Optimize queries using regex matchers for set lookups & Postings compression

A common use case for regex matchers is to use them to query all series matching a set of label values, e.g. up{instance=~"foo|bar|baz"}. Grafana's...

CodeProject page

Implement volume snapshotting support into the external Manila provisioner

OpenStack Manila manages shared file-systems across the cloud. Being able to create and access them with ease from the container world is showing to...

CodeProject page

IPTables Integration with OPEN POLICY AGENT(OPA)

This project involves designing the layout of IPTable rules using OPA's policy language Rego, implementing the algorithms that generate IPTables from...

CodeProject page

Multi-mesh performance benchmark tool

Benchmarks continuously strive to improve performance standards in order to stay relevant in the market and playing important role for having better...

CodeProject page

Extending Prombench and adding rule formatting for Prometheus

Prombench the benchmarking tool for Prometheus will be extended to support even more tests, newer components, metrics which will help both developers...

CodeProject page

Proposal for Auto-tune RocksDB

Using machine learning method to tune database configurations automatically

CodeProject page

Support Source IP Based Query Block/Allow in CoreDNS

When CoreDNS serves DNS queries publicly or inside Kubernetes clusters, the source IP of the incoming DNS query is an important identity. For...

CodeProject page

Add Plugin Mechanism to the Dashboard

This project aims to introduce a plugin mechanism to the Kubernetes Dashboard. It shall deal with defining the plugin framework architecture, it’s...

CodeProject page

Run GPU sharing workloads with Kubernetes + Kubeflow

GPUSharing is an open source project which could share GPU by leveraging Kubernetes scheduling and Device Plugin extensibility.I would like to...

CodeProject page

Add Support for Custom Resource Definitions to the Dashboard

The Kubernetes dashboard previously supported Third Party Resources (TPR), but these were replaced in Kubernetes by Custom Resource Definitions...

CodeProject page

Enable multiple network interfaces for Rook storage providers

This project aims to create new API to enable multiple network interface for Rook storage providers. Currently, Rook providers only choice is to use...

CodeProject page

GitHub integrated benchmarking tool for Prometheus TSDB

It is better to discover performance problems sooner than later, but this is even more important if we are talking about a database. The newly...

CodeProject page

2018

7 projects

Official year page

Integrate Containerd with Katacontainers

The project aims at creating a containerd-kata runtime plugin for containerd to integrate it with katacontainers. The integration enables containerd...

CodeProject page

Building a testing & benchmarking environment for Prometheus

My project aims to benchmark Prometheus & test Prometheus’s Kubernetes & Consul Service Discovery in an automated & real-time environment. This will...

CodeProject page

Add Network File System (NFS) as a Rook storage backend

Rook is an open source orchestrator for distributed storage systems running in kubernetes, currently in alpha state and has focused initially on...

CodeProject page

Extending Envoy's fuzzing coverage

Envoy is getting fuzz testing support. The coverage is limited. This project focuses on extending the fuzz coverage including proto, data plane, H2...

CodeProject page

Composite Label Indices & Alerts rule testing

Alerting is an important feature in monitoring when it comes to maintaining site reliability, and Prometheus is being used widely for this. Hence it...

CodeProject page

Conditional Name Server Identifier - CoreDNS

In distributed TensorFlow, identifying the nodes without domain name collision is a big challenge. CoreDNS supports DNS Name Server Identifier (NSID)...

CodeProject page

Storage API for Aggregated API Servers

Kubernetes offers two ways to extend the core API, by using the CustomResourceDefinitons or by setting up an aggregated API server. This ensures...

CodeProject page

2017

6 projects

Official year page

Improve Third Party Resources

ThirdPartyResources are already available but the implementation has languished with multiple outstanding capabilities that are missing. They did not...

CodeProject page

instrument OpenTracing with go-restful web framework

go-restful（https://github.com/emicklei/go-restful）is a widely-used library for building REST-style Web Services using Google Go. With powerful...

CodeProject page

Create and implement a Data model to standardize Kubernetes logs

This project aims to build and implement a Data model for logs in a large kubernetes cluster to process, correlate and query to make the...

CodeProject page

dnstap Middleware

The project The goal is to capture the DNS data within a CoreDNS middleware and write it to a "dnstap log file" (prehaps over the network) Steps I...

CodeProject page

Develop a set of Jupyter Notebooks for the Kubernetes Python Client + Kubernetes Python Client update

The Kubernetes python client is a Kubernetes incubator project. The python client makes it possible to access Kubernetes with python. Jupyter...

CodeProject page

Integrate Unikernel Runtime

The main idea of this proposal is Why and How we integrate unikernel as a runtime into kubernetes/frakti project, so that kubernetes could use...

CodeProject page