--- title: Best CNCF posts — August 2026 | daily.dev description: The most upvoted CNCF posts from August 2026, curated by the daily.dev community. canonical: https://daily.dev/sources/cncf/best-of/2026/08 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/cncf/best-of/2026/08 og:type: website og:site_name: daily.dev og:title: Best CNCF posts — August 2026 | daily.dev og:description: The most upvoted CNCF posts from August 2026, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of CNCF — August 2026 1. 1 [](https://daily.dev/posts/kyverno-is-a-platform-primitive-not-a-security-tool-ljkednzl9 "Kyverno is a platform primitive, not a security tool") Article CNCF · 4w Kyverno is a platform primitive, not a security tool Kyverno is typically treated as a security tool—reviewed by security teams, deployed with a handful of validation policies, and left mostly idle. The author argues this framing wastes most of the tool's capability: Kyverno's four verbs (validate, mutate, generate, verify images) are mostly constructive, not gate-based, and platform teams get far more value from mutation and generation than security teams do from validation alone. Concrete platform patterns include namespace furnishing, sidecar injection, image reference rewriting, default resource requests, and ownership labeling. The core reframe: Kyverno policies are a platform primitive—an abstraction like Pods or Services—that turns organizational beliefs into automatic, self-service enforcement rather than documentation or tribal knowledge. This is framed as the opening post in a longer series on policy-driven platform engineering. 15 2 2. 2 [](https://daily.dev/posts/stop-trying-to-learn-all-of-kubernetes-at-once-uckmf7dix "Stop trying to learn all of Kubernetes at once") Article CNCF · 3w Stop trying to learn all of Kubernetes at once Kubernetes is often taught through overwhelming resources like exhaustive documentation, certification tracks, or link-dump listicles that fail to build foundational understanding. Instead, five core mental models are proposed as the scaffolding to learn first: desired state and reconciliation, the disposable control-plane/worker-node relationship, the four networking layers from container to ingress, requests and limits as a survival contract for scheduling, and why CNI/CSI exist as plugins rather than built-in features. Deeper topics like service meshes, policy engines, GitOps, and observability can wait until a real problem calls for them. A free, vendor-neutral primer at kubeschool.portainer.io is mentioned as a resource that stays at this conceptual altitude. 13 3. 3 [](https://daily.dev/posts/opencost-1-121-0-first-of-a-kind-kubernetes-inference-cost-tracking-dnnii3bip "OpenCost 1.121.0: First-of-a-kind Kubernetes inference cost tracking") Article CNCF · 6w OpenCost 1.121.0: First-of-a-kind Kubernetes inference cost tracking OpenCost 1.121.0 introduces Kubernetes-native inference cost tracking by integrating with llm-d and vLLM. The release exposes two distinct cost metrics — allocation-based (full hosting cost including idle GPU time) and usage-based (active inference compute only) — published to Prometheus and accessible via REST API. The distinction is critical: using only usage-based cost to justify self-hosting versus SaaS APIs is a common mistake, since idle GPU time can make self-hosting 4x more expensive than it appears. The integration also accounts for KV cache hits, disaggregated prefill/decode costs, and shared infrastructure components like the inference scheduler and gateway proxy. A proof-of-concept was validated on a 109-GPU, 30-model cluster. Platform and FinOps teams can use these metrics for chargeback reporting, utilization analysis, and build-vs-buy decisions. 11 [See all CNCF archives](/sources/cncf/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/cncf/best-of/2026/08#page","url":"https://daily.dev/sources/cncf/best-of/2026/08","name":"Best CNCF Posts — August 2026","description":"The most upvoted CNCF posts from August 2026, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/cncf/best-of/2026/08#items","numberOfItems":3,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/kyverno-is-a-platform-primitive-not-a-security-tool-ljkednzl9","name":"Kyverno is a platform primitive, not a security tool"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/stop-trying-to-learn-all-of-kubernetes-at-once-uckmf7dix","name":"Stop trying to learn all of Kubernetes at once"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/opencost-1-121-0-first-of-a-kind-kubernetes-inference-cost-tracking-dnnii3bip","name":"OpenCost 1.121.0: First-of-a-kind Kubernetes inference cost tracking"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"CNCF","item":"https://daily.dev/sources/cncf"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/cncf/best-of"},{"@type":"ListItem","position":5,"name":"August 2026"}]}]} ```