G=Graduated, I=Incubating, S=Sandbox; ohne Kürzel = kein CNCF-Projekt (Quelle in Klammern).
Provisioning & Runtime
Automation: KubeEdge (G),
OpenTofu (S), Meshery (I), Cluster API (K8s-SIG),
Ansible (Red Hat).
Registry: Harbor (G), Dragonfly (G).
Security: OPA (G), Kyverno (G),
Falco (G), in-toto (G), TUF (G), Notary
Project (I), Kubescape (I), Keycloak (I),
Confidential Containers (I), External Secrets
Operator (S), Sigstore (OpenSSF), Trivy (Aqua).
Key Mgmt: SPIFFE/SPIRE (G),
Vault (HashiCorp).
Storage: Rook (G), CubeFS (G),
Longhorn (I), Velero (S, Backup/DR).
Runtime/Network: containerd (G),
CRI-O (G), Cilium (G), CNI (I, Spezifikation),
gVisor (S, aufgenommen 10/2026, noch nicht in
landscape.yml), Kata (OpenInfra),
Calico (Tigera).
Orchestration & Management
Scheduling: Kubernetes (G), KEDA (G),
Knative (G), Crossplane (G), Kubeflow (G),
Karmada (G), Volcano (I), wasmCloud (I),
k0s (S).
Coordination: etcd (G), CoreDNS (G).
RPC: gRPC (I).
Proxy/Gateway: Envoy (G), Contour (I),
Emissary-Ingress (I), kgateway (S), Gateway
API (K8s-SIG).
Service Mesh: Istio (G), Linkerd (G),
Kuma (S).
App Definition & Development
Database: Vitess (G), TiKV (G).
Streaming: CloudEvents (G), NATS (G),
Strimzi (I).
App-Def & Build: Helm (G), Dapr (G),
Buildpacks (G), Backstage (I), KubeVela (I),
KubeVirt (G), Operator Framework (I), Score (S),
Kustomize (K8s-SIG).
CI/CD: Argo (G), Flux (G),
Tekton (I).
Observability, Platform & KI
Observability: Prometheus (G),
OpenTelemetry (G), Jaeger (G), Fluentd (G),
Thanos (I), Cortex (I).
Chaos/Cost: Chaos Mesh (I), Litmus (I),
OpenCost (I).
Feature Flags: OpenFeature (I).
Platform: k3s (S), Flatcar (I).
Wasm: Spin (S), SpinKube (S),
container2wasm (S); wasmCloud (I) steht unter Scheduling,
WasmEdge (S) unter Runtime.
KI (neu 2025/26): AI Agent, Inference
(KServe I, llm-d S), Data, Training, AI Native Infra.