OSS Tales

Every infrastructure tool has a founding myth, a first commit pushed to solve a problem nobody else would. These are the origin stories — the initial need, the people, the pivots that almost killed the project, and the crises that forged it — told through a sourced timeline.

oss-tale

AIR Blackbox

Solo-built by a tech-recruiting veteran as an EU AI Act flight recorder for AI agents, AIR Blackbox went from first commit to six-failed-Show-HNs to a production compliance stack with externally-anchored, red-teamed evidence.

2026–present
oss-tale

Argo CD

Built inside Intuit after it silently absorbed Applatix, Argo CD turned a multi-cluster management gap into the de facto GitOps standard for Kubernetes.

2018–present
oss-tale

Backstage

Spotify's Tools squad built an internal developer portal called System-Z in 2014 to stop 100+ squads reinventing tooling; renamed Backstage in 2018, open-sourced March 2020, donated to the CNCF that September.

2014–present
oss-tale

Cilium

Started in December 2015 by Linux kernel networking developers Thomas Graf and Daniel Borkmann, Cilium moved Kubernetes networking, security, and observability into the kernel with eBPF — and became the first networking project the CNCF ever graduated.

2015–present
oss-tale

containerd

Docker needed plumbing between its engine and OCI's runc; Michael Crosby built the daemon, Kubernetes made it the default, and the industry inherited the maintenance.

2015–present
oss-tale

Crossplane

Upbound set out to prove cloud infrastructure belongs inside the Kubernetes API — then spent seven years deleting almost every mechanism it invented along the way.

2018–present
oss-tale

External Secrets Operator

GoDaddy's kubernetes-external-secrets was the popular kid; six rivals merged into a from-scratch Go rewrite that became the de facto way secrets enter Kubernetes.

2018–present
oss-tale

ExternalDNS

A Kubernetes-community fusion of three rival DNS controllers, ExternalDNS became the default way Kubernetes services get DNS records while never leaving 0.x.

2017–present
oss-tale

Flux

Built inside Weaveworks as a deployment daemon called fluxy, Flux gave the industry the word GitOps — then survived its maker's collapse under CNCF governance.

2016–present
oss-tale

Ingress NGINX

Born as a sample controller inside the kubernetes/contrib repo, Ingress NGINX became the default traffic entry point for half the cloud-native world — then was archived after years of one-maintainer heroics.

2015–2026 (archived)
oss-tale

OpenTofu

HashiCorp relicensed Terraform under the BUSL; fifteen days later its competitors forked the last MPL release and handed it to the Linux Foundation.

2023–present
oss-tale

Prometheus

Ex-Googlers at SoundCloud, missing Borgmon, built the pull-based monitoring monoculture that graduated second from the CNCF — and stayed single-node on purpose.

2012–present
oss-tale

Terraform

Mitchell Hashimoto's 'Initial commit' of May 21, 2014 — a graph-based, provider-plugin provisioning engine that became the de facto infrastructure-as-code standard, survived its own license crisis, and now belongs to IBM.

2014–present