As Bare Metal kubernetes adoption grows within the CNCF ecosystem, projects such as Metal³ play a critical role in reliable, production-grade infrastructure. Core components including IPAM, CAPM3, Bare Metal Operator (BMO) and Ironic Standalone Operator (IRSO) must operate correctly across a wide range of real-world conditions.

This talk presents fuzz testing as a practical and effective technique for improving the robustness of Metal³ components. By continuously injecting randomized and malformed inputs into key interfaces and control loops.

We will discuss how fuzzing can be integrated into CNCF style development workflows, corpus management aligned with upstream contribution practices. We highlight issues uncovered in IPAM, CAPM3, BMO and IRSO.

Attendees will gain actionable guidance on adopting fuzzing within their own cloud-native projects and insight into how proactive testing strategies can strengthen the reliability and security of Bare Metal Kubernetes infrastructure.