rocket_launchFrontier is proposing for CNCF Sandbox Status

Cloud-Native Delivery
Network for Kubernetes

The declarative Kubernetes Operator that orchestrates, caches, and serves static frontends at the edge. Stop building custom Nginx images today. Serve OCI artifacts as microfrontends natively.

descriptionorigin.yaml
apiVersion: k8s-frontier.dev/v1
kind: Origin
metadata:
  name: mfe-shell
  namespace: shop
spec:
  target:
    distribution: mfe-distribution
    securityPolicy: mfe-security
    gateway:
      name: shop-gateway
      namespace: edge
      group: gateway.networking.k8s.io
      kind: Gateway
    route:
      hostnames:
        - shop.example.com
      pathPrefixes:
        - /
  type: OCI
  oci:
    artifact: registry.example.com/mfe/shell:v1.0.0
    artifactPullPolicy: IfNotPresent
    artifactPullSecret: registry-creds

Capabilities

Engineered for Platform Precision

A unified control plane for modern web delivery, built specifically for the Kubernetes ecosystem.

hub

True Delivery Network

Decouple application logic from serving infrastructure. No more custom Nginx images or sidecars for every deployment.

layers

3-Tier Cache Layers

In-memory hot cache, node-local SSD warm cache, and distributed cold cache for ultimate TTFB performance.

settings_ethernet

GitOps Native

Native Distribution and Origin resources. Manage your global frontend footprint via Flux or ArgoCD declaratively.

router

Gateway API Native

Automatic HTTPRoutes provisioning based on Origin state. Integrated with standard K8s ingress patterns.

security

Dynamic Security

Declarative HSTS, CORS, and CSP policies enforced at the operator level across all nodes with Zero-Trust principles.

vitals

Atomic Rollouts

Seamless OCI artifact routing. Atomic version switching without container restarts or Pod churn.

Architectural Blueprint

Frontier implements a highly efficient Control Plane/Data Plane separation. The Operator watches custom resources while localized Edge Nodes handle the actual traffic orchestration and multi-layer caching.

DESIRED STATE — CRDsCONTROL PLANEDATA PLANEwatchreconcileGET /appHTTPRoutegossip · warmcold misspull OCIwarm hitpackage_2OriginCRD · HTTPRoutenetwork_nodeDistributionCRD · ClusterstorageCachePolicyCRD · ConfigshieldSecurityPolicyCRD · Configsettings_input_componentOPERATORcontroller-managerrouterGatewaytraefik · externaldnsEdge Nodedaemonset · hot tierdnsEdge Nodedaemonset · hot tierdatabaseSource Nodestatefulset · colddevicesClientGET /appinventory_2OCI Registryartifact layers
hot hitedge memorywarm hitedge↔edge gossipcold misssource cache → ocireconcilecrd → operator → nodosorigin v1
simulación en vivo
Request flow Control / watch Response Live probe
settings_input_component

Control Plane (Operator)

Watches Origin CRDs and coordinates synchronization across the cluster. Manages OCI artifact lifecycle and secret rotation.

dynamic_feed

Data Plane (Edge Nodes)

Lightweight DaemonSets optimized for throughput. Serves content directly from hot and warm cache layers with sub-millisecond latency.

security_update_good

Security Enforcement

Global security policies applied at the ingress point. HSTS, WAF integration, and header sanitization are standard.

Committed to Open Source

Frontier is built with CNCF principles from day one. We are currently in the process of applying for Sandbox status to ensure long-term community growth and vendor neutrality.

verified100% Vendor-Neutral
verifiedMIT Licensed
verifiedOpen Governance
verifiedGitOps First

"The missing piece of the cloud-native frontend stack."

Join 50+ contributors building the future of delivery.

Deploy in 30 Seconds

Experience the power of cloud-native delivery with a single command. Install the operator and start deploying microfrontends today.

  • check_circleNo custom Nginx config required
  • check_circleAutomatic Gateway API integration
  • check_circleBuilt-in OCI artifact support
terminalOperator Setup
content_copy
$ helm repo add frontier https://charts.frontier.io
$ helm install frontier-operator frontier/frontier-operator

# Verify installation
$ kubectl get pods -n frontier-system

Built by the Cloud Native Community

Soon ;)

We are just getting started. Join us when the community and governance are live.