Skip to main content
📬 Get weekly Production AI insights Practical notes on Kubernetes, AI infrastructure and platform engineering. No spam. Subscribe free
Tekton CNCF Incubating Kubernetes CI/CD
DevOps

Tekton Becomes CNCF Incubating: What It Means

Tekton moved to CNCF Incubation at KubeCon EU 2026. Kubernetes-native CI/CD pipelines, supply chain security, and integration with ArgoCD and Sigstore.

LB
Luca Berton
· 2 min read

Tekton’s move to CNCF Incubation at KubeCon EU 2026 validates what many platform teams already knew: Kubernetes-native CI/CD is the future.

Why This Matters

Tekton is not just another CI/CD tool. It is a Kubernetes-native workflow engine with composable primitives (Steps, Tasks, Pipelines) that run as pods. This means:

  • No external CI server — your cluster IS the CI server
  • Scalability — pipelines scale with your cluster
  • Security — pod security policies, RBAC, and network policies apply to CI/CD
  • Portability — pipelines run on any Kubernetes cluster

The Supply Chain Security Story

Tekton’s integration with the CNCF and OpenSSF ecosystem creates a complete supply chain:

  1. Tekton — builds and tests code
  2. Sigstore (OpenSSF) — signs artifacts cryptographically
  3. ArgoCD (CNCF) — deploys signed artifacts via GitOps
  4. SPIFFE/SPIRE (CNCF) — provides workload identity

No other CI/CD tool has this depth of cloud native integration.

Who Uses Tekton

  • Red Hat OpenShift Pipelines — Tekton is the CI/CD engine
  • IBM Cloud Continuous Delivery — built on Tekton
  • Puppet — uses Tekton for delivery pipelines
  • Ford Motor Company — enterprise adoption

Tekton vs Other CI/CD Options

FeatureTektonGitHub ActionsJenkinsArgoCD
K8s nativeYesNoNoDelivery only
Runs in clusterYesExternalExternalYes
Supply chain signingSigstoreCustomCustomVerifies
ScalabilityK8s podsRunner limitsAgent limitsK8s pods
Composable primitivesSteps/Tasks/PipelinesJobs/StepsStagesApps

For a detailed comparison, see Tekton vs GitHub Actions and GitLab CI Tutorial.

My Prediction

Tekton’s CNCF Incubation accelerates enterprise adoption. The combination of Kubernetes-native execution, supply chain security, and integration with ArgoCD and Sigstore makes it the most secure CI/CD option for cloud native teams.

If you run Jenkins or external CI/CD and want to move security closer to your workloads, Tekton is the path forward.

About the Author

I am Luca Berton, AI and Cloud Advisor. I design CI/CD pipelines for enterprise Kubernetes platforms. Book a consultation.

Related Articles

Luca Berton in the audience at BitBash 2025 in Veenendaal, with the Azure Deployment Environments and DevBoxes title slide on screen behind him
DevOps

ArgoCD Pull Request Generator: Per-PR Preview Environments

Build per-PR preview environments with the ArgoCD pull request generator and Gitea on kind: one namespace per PR, SHA image tags, cleanup on close, quotas.

To infinity and beyond slide listing OpenTelemetry Baggage, OTTL and OpAMP at the SRE NL meetup at Elastic Amsterdam
DevOps

OpenTelemetry Baggage in Python Without Leaking It

OpenTelemetry baggage in Python: the W3C header, reading and writing it, BaggageSpanProcessor, and a tested lab that stops it leaking to third-party APIs.

To infinity and beyond slide at the SRE NL meetup at Elastic Amsterdam listing OTTL, the OpenTelemetry Transformation Language, with the ottl.run playground link
DevOps

OpenTelemetry Transform Processor: 15 Tested OTTL Recipes

15 tested OTTL recipes for the OpenTelemetry transform and filter processors: redact, hash, parse JSON logs, map severity, drop noise, rename metrics.

A full auditorium at CfgMgmtCamp 2025 in Ghent during the Pkl talk, with a Pkl code sample on the projector
DevOps

Pkl Configuration Language for Kubernetes and Prometheus

A tested Pkl tutorial: install the CLI, use the pkl-k8s package, amend one typed template per environment and generate Prometheus alert rules promtool accepts.

All Articles

Free 30-min Production AI consultation

Book Now