Insights from KubeCon + CloudNativeCon 2023

### Overview In this panel discussion, analysts from Enterprise Strategy Group reflect on the key themes and announcements from KubeCon + CloudNativeCon North America 2023. The discussion highlights major trends impacting cloud-native ecosystems, specifically focusing on generative AI, software supply chain security, observability innovations, platform engineering, and modernization metrics across production environments.

### Key Topics - **Generative AI as Cloud-Native Scaffolding**: Keynotes underscored that cloud native provides foundational infrastructure for AI initiatives, with major players such as OpenAI, Hugging Face, and NVIDIA running on Kubernetes. - **Built-in Security and Automation**: End-user organizations (such as Boeing, Volvo, Spotify, and BlackRock) and open-source contributors emphasized building security, auto-updating, auto-scaling, and auto-patching directly into infrastructure clusters without requiring manual developer intervention. - **Software Supply Chain Security**: The OpenSSF community emphasized the need for greater direct involvement from dedicated security personnel alongside developers and operations teams. Additionally, efforts include partnering with regulatory and governmental bodies such as CISA, NIST, and the White House to ensure open-source software supply chain security. - **Observability Standards and Kernel-Level Visibility**: The event spotlighted OpenTelemetry as a unifying standard to consolidate fragmented telemetry data across disparate observability tools, alongside widespread applications of eBPF. - **Platform Engineering & Developer Tooling**: Across the CI/CD pipeline (from Day 0 to Day 2 operations), platform engineering emerged as an ubiquitous focus area to unify developer, DevOps, and security workflows.

### Technical Details - **eBPF and Kepler for Sustainability**: Extended Berkeley Packet Filtering (eBPF) was featured across roughly 30 distinct applications, enabling kernel-level telemetry collection for cost management and CPU profiling. Projects like Kepler utilize eBPF to measure energy consumption and carbon footprints by correlating runtime data with public utility energy outputs. - **Adoption Statistics**: ESG research shared during the session revealed that 88% of new production applications run on containers and microservices, 51% of developer respondents use generative AI to generate code, 45% use generative AI to improve code, and 39% currently use WebAssembly in cloud-native environments.

### Takeaways - Incorporating security controls and automated policies into platform infrastructure allows organizations to scale safely while maintaining high developer velocity. - Open standards such as OpenTelemetry and kernel instrumentation through eBPF are critical to solving full-stack visibility and environmental sustainability tracking. - Modernization relies heavily on the collaboration between developers, DevOps, and platform engineering teams across edge, container, and WebAssembly deployments.