--- title: Best CNCF posts of 2025 | daily.dev description: The most upvoted CNCF posts of 2025, curated by the daily.dev community. canonical: https://daily.dev/tags/cncf/best-of/2025 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/cncf/best-of/2025 og:type: website og:site_name: daily.dev og:title: Best CNCF posts of 2025 | daily.dev og:description: The most upvoted CNCF posts of 2025, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of CNCF — 2025 1. 1 [](/posts/3-000-000-downloads-thank-you-k7o4hji5d "3,000,000 downloads. Thank you") Article Hacker News · 1y 3,000,000 downloads. Thank you Podman Desktop celebrates reaching 3 million downloads, highlighting its journey from idea to essential developer tool. The project recently joined the CNCF Sandbox and has seen significant enterprise adoption. Recent improvements include enhanced Kubernetes workflows, better Docker compatibility, AI integration through Podman AI Lab, and expanded extension ecosystem. User feedback shows strong satisfaction with the unified container management experience and rootless container capabilities. 79 2 2. 2 [](/posts/litmuschaos-litmus-litmus-helps-sres-and-developers-practice-chaos-engineering-in-a-cloud-native-wa-jqtg9ief5 "litmuschaos/litmus: Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is") Article Community Picks · 2y litmuschaos/litmus: Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is LitmusChaos is an open-source Chaos Engineering platform designed to help teams identify infrastructure weaknesses by inducing controlled chaos tests. It operates as a set of microservices that use Kubernetes custom resources to define and manage chaos experiments. The platform includes a Chaos Control Plane for management and visualization, and a Chaos Execution Plane for running experiments. The core resources include ChaosExperiment, ChaosEngine, and ChaosResult, which helps in defining, linking, and storing the outcomes of chaos tests. LitmusChaos supports developers, CI/CD pipeline builders, and SREs to improve application resilience. 41 1 3. 3 [](/posts/a-new-era-for-helm-q1mqh6pel "A new era for Helm") Article CNCF · 2y A new era for Helm Helm, a longstanding tool in the cloud native ecosystem, is undergoing significant changes to increase contributor engagement and streamline processes. The focus for 2025 includes pruning inactive maintainers, increasing new contributor participation, and setting actionable goals, with the release of Helm v4 anticipated at CloudNativeCon/KubeCon North America 2025\. The Helm team is dedicated to growing its community while maintaining the project's stability and reliability. 39 1 4. 4 [](/posts/crossplane-crossplane-the-cloud-native-control-plane-d1kzod9zf "crossplane/crossplane: The Cloud Native Control Plane") Article Community Picks · 1y crossplane/crossplane: The Cloud Native Control Plane Crossplane is an open-source framework for building cloud native control planes without writing code. It provides an extensible backend for orchestrating applications and infrastructure across different environments, with a configurable frontend offering declarative APIs. As a CNCF project, it enables infrastructure management through Kubernetes-style resources and supports multiple cloud providers through its provider ecosystem. 33 5. 5 [](/posts/lima-becomes-a-cncf-incubating-project-hfx7of7kc "Lima becomes a CNCF incubating project") Article CNCF · 48w Lima becomes a CNCF incubating project Lima, a tool for running Linux virtual machines optimized for containers in local development environments, has been promoted to CNCF incubating status. Originally created in 2021 as a containerd demonstration tool for Mac users, Lima now supports multiple container engines (containerd, Docker, Podman, Kubernetes) and has expanded to include AI agent sandboxing use cases. The project has grown significantly since joining CNCF as a sandbox project in 2022, doubling its GitHub stars to 18,200+ and gaining adoption by tools like Colima, Rancher Desktop, and AWS Finch. Version 2.0 introduces a plug-in system for VM drivers, GPU acceleration support, and Model Context Protocol server capabilities. 22 6. 6 [](/posts/openfga-becomes-a-cncf-incubating-project-h2sgysikw "OpenFGA Becomes a CNCF Incubating Project") Article CNCF · 48w OpenFGA Becomes a CNCF Incubating Project OpenFGA, an authorization engine based on Google's Zanzibar that implements Relationship-Based Access Control (ReBAC), has been promoted to CNCF incubating status. The project centralizes authorization logic through an API-first approach, making it easier to implement complex access control at scale. Since joining CNCF as a sandbox project in 2022, OpenFGA has gained 37 production adopters, expanded to multiple SDKs (Python, Java, Go, .NET, JS), added maintainers from Grafana Labs and GitPod, and integrated with CNCF projects like OpenTelemetry, Helm, and Prometheus. The project has accumulated 4,300+ GitHub stars and 96 contributors, with future plans including new SDKs for Ruby, Rust, and PHP, AuthZen standard support, and performance improvements. 19 7. 7 [](/posts/platformless-how-choreo-built-a-secure-kubernetes-platform-with-gitops-srypkvhhc "Platformless: How Choreo Built a Secure Kubernetes Platform with GitOps") Article ITNEXT · 2y Platformless: How Choreo Built a Secure Kubernetes Platform with GitOps Choreo, by WSO2, is an open-source Internal Developer Platform (IDP) built on Kubernetes and more than 20 Cloud Native Computing Foundation (CNCF) tools. It aims to provide a secure, scalable, and developer-friendly environment by automating Kubernetes tasks and offering features such as secure defaults, network security, GitOps-based deployments, and enterprise-grade compliance. Choreo enables developers to focus on code while handling infrastructure concerns, thereby streamlining software delivery and security enforcement. 19 8. 8 [](/posts/metal3-io-becomes-a-cncf-incubating-project-yy3y19ald "Metal3.io becomes a CNCF incubating project") Article CNCF · 1y Metal3.io becomes a CNCF incubating project Metal3.io has been accepted as a CNCF incubating project, providing Kubernetes-native bare metal host management capabilities. The project enables enrollment, provisioning, and lifecycle management of bare metal machines through Kubernetes APIs, integrating with Cluster API for infrastructure-agnostic cluster management. With 57 contributing organizations and adopters including Fujitsu, Ikea, and Ericsson, Metal3.io offers components like Baremetal Operator, IP Address Manager, and Ironic Standalone Operator. The 2025 roadmap includes multi-tenancy support, ARM architecture compatibility, and improved DHCP-less provisioning. 15 9. 9 [](/posts/one-giant-kubernetes-cluster-for-everything-srwhmt571 "One giant Kubernetes cluster for everything") Article A Java geek · 2y One giant Kubernetes cluster for everything Deciding on the optimal size of Kubernetes clusters is crucial for long-term organizational impact. A single large cluster provides benefits like better resource utilization, lower operational overhead, simplified networking and governance, and cost efficiency. However, it has downsides such as a larger blast radius, multi-tenancy challenges, scalability limits, and maintenance risks. vCluster, an open-source Kubernetes distribution, helps mitigate these issues by allowing the creation of virtual clusters within a single host cluster. This approach combines the advantages of a large cluster while addressing its disadvantages, proposing one cluster for production and another for all other environments. 15 [See all CNCF archives](/tags/cncf/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/cncf/best-of/2025#page","url":"https://daily.dev/tags/cncf/best-of/2025","name":"Best CNCF Posts of 2025","description":"The most upvoted CNCF posts of 2025, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/cncf/best-of/2025#items","numberOfItems":9,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/3-000-000-downloads-thank-you-k7o4hji5d","name":"3,000,000 downloads. Thank you"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/litmuschaos-litmus-litmus-helps-sres-and-developers-practice-chaos-engineering-in-a-cloud-native-wa-jqtg9ief5","name":"litmuschaos/litmus: Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is "},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/a-new-era-for-helm-q1mqh6pel","name":"A new era for Helm"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/crossplane-crossplane-the-cloud-native-control-plane-d1kzod9zf","name":"crossplane/crossplane: The Cloud Native Control Plane"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/lima-becomes-a-cncf-incubating-project-hfx7of7kc","name":"Lima becomes a CNCF incubating project"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/openfga-becomes-a-cncf-incubating-project-h2sgysikw","name":"OpenFGA Becomes a CNCF Incubating Project"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/platformless-how-choreo-built-a-secure-kubernetes-platform-with-gitops-srypkvhhc","name":"Platformless: How Choreo Built a Secure Kubernetes Platform with GitOps"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/metal3-io-becomes-a-cncf-incubating-project-yy3y19ald","name":"Metal3.io becomes a CNCF incubating project"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/one-giant-kubernetes-cluster-for-everything-srwhmt571","name":"One giant Kubernetes cluster for everything"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"CNCF","item":"https://daily.dev/tags/cncf"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/cncf/best-of"},{"@type":"ListItem","position":5,"name":"2025"}]}]} ```