controlplane

Welcome to native.cloud! An open source, vendor-neutral ontology for portable, consistent Kubernetes labels and annotations. These labels help unify indicators for compute, identity, workload, tenancy, topology, vendors and more:

Standardised Metadata: Unified K8s labels across domains (enterprise platforms, suppliers, and tooling)
Automation (and DevSecOps) friendly: Simplified security, governance, and platform maintenance
Vendor-Neutral and Extensible: Open source with low-friction addition of community contributions.

Explore the project native.cloud 🗺️🧭🧬☁📐

As your applications mature, a stable cryptographic base becomes absolutely critical. Traditional secrets management tools weren't always built for seamless extension or easy redeployment within a larger platform architecture. That’s where OpenBao steps in!

In our latest blog, we dive into how ControlPlane Enterprise for OpenBao provides a powerful open source root-of-trust designed specifically for modern platform engineering.

Whether you are aiming for multi-tenant adoption, SaaS redeployment, or on-prem self-hosted apps, OpenBao can scale with you.
control-plane.io/posts/openbao-…

We are proud to be returning as Diamond Sponsor for FluxCon North America 2026, the co-located event dedicated to @fluxcd!

The schedule features a great lineup of speakers from Morgan Stanley, Ericsson and our very own Stefan Prodan.

📅 Monday, 9 November, from 09:00
📍Salt Lake City, Utah

The FluxCon North America 2025 was the inaugural event, and the team were blown away by the incredible community response and engagement, so we’re looking forward to returning and seeing you there. Drop us a message if you’d like to set a time to catch up, or we’ll also be available on our stand.

Registration is still open for @KubeCon_ + CloudNativeCon North America. In-person attendees can register for an All-Access pass that includes entry to all @CloudNativeFdn hosted co-located events, including FluxCon.

The Hugging Face and OpenAI intrusions have generated plenty of commentary, but very little analysis from the people who break into and defend these environments for a living.

In our latest blog post, Tom Cope, Principal Consultant at ControlPlane, shares his perspective on what these intrusions reveal about how these platforms are defended and what security teams should change as a result. Read the full analysis:

control-plane.io/posts/old-is-a…

Why does an AI agent need an identity of its own at all? Isn't sandboxing it, or tightly scoping its permissions, sufficient?

After all, we have decades of experience with least-privilege IAM, mTLS, and short-lived tokens. Surely an agent is just another workload?

Read the blog to get all the details
control-plane.io/posts/agentic-…