KubeCon North America 2025 Retrospective: Closed Source And Open Source Battle For The AI-Native Cloud
The management question is no longer whether Kubernetes matters, but who controls the AI stack built on top of it. The centre of gravity is shifting from portable cloud-native patterns toward environments shaped by a small number of GPU, cloud, and software vendors. For CIOs and platform leaders, that changes the decision from โwhich runtime?โ to โwhich dependencies are acceptable, and who approves them?โ
This creates a governance problem as much as a technology one. AI platforms can accelerate delivery, but they also concentrate risk in procurement, architecture, security, and finance. Teams will need clearer decision rights for where proprietary accelerators are justified, where open interfaces are mandatory, and how exceptions are reviewed. Without that discipline, AI modernisation can quietly become a new form of strategic lock-in.
Three practical questions now matter:
- Which AI workloads truly require tightly coupled vendor stacks, and which can stay on interoperable infrastructure?
- What evidence will be used to justify GPU spend, platform duplication, and migration priorities?
- How will platform engineering balance developer speed with compliance, cost control, and supplier concentration risk?
The opportunity is to treat open-source conformance, observability, policy, and security tooling as portfolio controls rather than engineering features. That shifts the conversation from โadopt the latest platformโ to โbuild an operating model that preserves negotiating power.โ For many enterprises, the next advantage will come not from chasing every AI-native capability, but from deciding where standardisation is more valuable than optimisation.
- AI-native workloads take the spotlight. While the AI conformance effort will unfold over years, Kubernetes is already evolving into an AI-serving substrate. Features like dynamic resource allocation for GPU scheduling and AI inference address cost efficiency and performance. These capabilities promise flexibility but also underscore the dependency on proprietary hardware and hyperscale cloud ecosystems.
- Platform engineering ups its game. Once tailored to developer velocity, platform engineers must now also steward corporate resources, balancing speed with governance, compliance, and cost optimization. Intuit showed how itโs done, highlighting its migration of legacy systems to container-based applications and services.
- Observability is everywhere. Observability solutions popped up across the expo floor. Grafana Labs announced capabilities for AI-assisted tracing for natural-language debugging, among other capabilities. These and related announcements highlight how observability is central to increasingly elaborate AI use cases.
- eBPF keeps expanding its brief. Isovalent, the Cisco-owned company behind the open-source Cilium eBPF project, rolled out updates that consolidated eBPFโs place at the center of Kubernetes and container networking, security, observability, and more. Isovalent juiced up KubeVirt networking for VMs with its release of Address Family Express Data Path (AF_XDP) that allows Linux kernel bypass for high-performance networking. The Cilium project marked advances in cluster connectivity, runtime security, and scalability.
- vCluster moves into AI infrastructure tenancy. vCluster Labs โ the startup formerly known as Loft Labs โ first got attention for its method of virtualizing Kubernetes for greater efficiency. Itโs now officially on the AI bandwagon with its Infrastructure Tenancy Platform for AI available to run GPU-intensive workloads on NVIDIA DGX systems. The effort integrates vClusterโs signature approach to virtualization with NVIDIA Base Command Manager for lifecycle management, dynamic GPU autoscaling with Karpenter-based automation, and private node capabilities for security.
- Security and policy as code steps up its game. Kubernetes security has ramped up in recent years. Key developments at KubeCon include agentic security workflow based on eBPF and deep system telemetry for runtime protection. Policy as code moved forward, too: Kyvernoโs latest release introduced common expression language-based policies, namespace enforcement, and SDK support, while Open Policy Agent Gatekeeper added Validating Admission Policy integration and enhanced auditing.
- WASM continues to mature as startups expand partnerships. Bailey Hayes of Cosmonic and Luke Wagner of Fastly discussed the WebAssembly System Interface 0.3 release and future roadmap. Researcher Elizabeth Gilbert introduced a method for observability between components in a composed WASM application. Fermyon, a WASM-powered platform as a service, announced its partnership for running its Spin platform on Akamaiโs Linode-powered edge infrastructure. And recently, Akamai took that partnership further by announcing the acquisition of Fermyon.
Zooming Out To The Big Picture
KubeCon North America 2025 showcased how the cloud-native ecosystem is adapting to AIโs rise and enabling further advances. The challenge now is to preserve open-source dynamism and collaboration while a select few companies with strategically closed-source technologies are at the center of the AI-native cloud. The AI Conformance Program is a big step forward in meeting this challenge for the next 10 years of the open-source cloud-native ecosystem. Enterprise users will shape this future, too, as they seek to diversify infrastructure choices, invest in open-source AI, and demand interoperability. Forrester clients who would like to further discuss the AI-native cloud can reach out to our analysts to understand how KubeConโs announcements affect their business.KubeCon North America 2025 Retrospective: Closed Source And Open Source Battle For The AI-Native Cloud
Enjoyed this article? Sign up for our newsletter to receive regular insights and stay connected.
