cert-manager and Dapr graduate within the CNCF at KubeCon Salt Lake City

2024-11-12 · Publisher : CNCF · Domain : Cloud & DevOps

On 12 November 2024, at KubeCon North America, the CNCF announces the graduation of cert-manager (86% of new production clusters, per the cited research) and Dapr (more than 3,700 contributors from over 400 organizations).

### Background On 12 November 2024, at KubeCon + CloudNativeCon North America, the CNCF publishes two announcements: the graduation of **cert-manager** and of **Dapr**. cert-manager automates issuing and renewing TLS and mTLS certificates in Kubernetes; Dapr is a distributed application runtime that provides APIs for microservices. ### Key facts - cert-manager: created in 2017 at Jetstack (now part of Venafi, a CyberArk company), accepted into the Sandbox in November 2020, more than 450 contributors, more than 200 releases. - cert-manager: 500 million downloads a month; research cited by the CNCF says 86% of new production clusters deploy it as standard practice. - Dapr: first released in 2019 at Microsoft, accepted into incubation in November 2021, more than 3,700 contributors from over 400 organizations. - Dapr is used, per the CNCF, by tens of thousands of organizations (Grafana, FICO, HDFC Bank, Zeiss) and maintained by 21 people from eight organizations. - cert-manager completed a CNCF-funded security audit and reviewed its governance, graduation requirements. ### Why it matters These two projects are discreet but ubiquitous platform building blocks: certificate management on one side, distributed application blocks on the other. For an IT services firm, graduation works as an architecture argument with security committees: documented governance, multi-organization maintenance, and a security audit for cert-manager. It does not remove the need to watch maintenance capacity, with Dapr maintained by only 21 people. ### Takeaway Two common Kubernetes platform building blocks, certificates and microservices, reach the CNCF's most mature level.

Tags : Kubernetes, Sécurité, Cloud natif, Open Source, Conférence