AI agents can ship code faster than humans can review it. Cloud Custodian acts as an automated safety net, ensuring all machine-deployed infrastructure follows security and compliance rules while catching costly misconfigurations before they become security gaps or budget overruns.
A decade of governance: Cloud Custodian at 10 and its role in the agentic AI era… Beyond agentic code, AI workloads like GPU fleets, model serving endpoints, and training pipelines introduce both a larger security attack surface and significantly higher cost exposure, where the risk of ungoverned resources is higher than ever. …
… AI agents can reason over intent, metadata, and context to distinguish between a genuine misconfiguration and a deliberate exception, reducing alert fatigue and improving signal quality for reviewers. Agentic governance pipelines. …
… However, in large, evolving codebases, these skills would need to be continuously maintained and updated to remain aligned with the actual repository structure. That makes them less like a one-time improvement and more like an additional system to operate and maintain. …
… To use a real LLM: Get an API key from OpenAI, Anthropic, or Gemini Create a Kubernetes secret with your key Update the AgentgatewayBackend to use the real host and authentication yaml apiVersion: agentgateway.dev/v1alpha1 kind: AgentgatewayBackend metadata: name: openai namespace: agentgateway-sys… …
… AI-Native Architecture: Unlike traditional gateways, Higress treats LLMs as first-class citizens. It includes specialized features like Token-based rate limiting to manage model costs and caching capabilities to reduce latency for common AI prompts . …
Posted on May 27, 2026 by Pavan Madduri Senior Cloud Platform Engineer @ Grainger | CNCF Golden Kubestronaut CNCF projects highlighted in this post If you run GPU workloads on Kubernetes — vLLM, Triton, training jobs, or the newer agentic inference stacks — you’ve probably hit a familiar problem: t… …
… What can maintainers and bug finders do? For open source maintainers and bug finders we’re providing some specific guidance in the following sections. AI vulnerability scanning: Maintainers Some foundation models are currently under very limited access rules. …
… Dataset distribution for training Large-scale training jobs often need the same dataset replicated across data-parallel workers: From Hugging Face dfget hf://datasets/allenai/c4/en/train-00000-of-01024.json.gz \ -O /data/c4/train-00000.json.gz From ModelScope dfget modelscope://datasets/damo/squad-… …