Links
AddA K8s operator to reduce CO2 footprint of your clusters.
How many of your dev/preview pods stay on during weekends? Or at night? It's a waste of resources! And money! But fear not, kube-green is here to the rescue.
kube-green is a simple k8s addon that automatically shuts down (some of) your resources when you don't need them.
Related contents:
Tool for building Kubernetes attack paths.
KubeHound creates a graph of attack paths in a Kubernetes cluster, allowing you to identify direct and multi-hop routes an attacker is able to take, visually or through complex graph queries.
The Kubenomicon was born of a desire to understand more about Kubernetes from an offensive perspective.
This project was heavily inspired by the Kubernetes Threat Matrix from Microsoft which is a great starting point as it provides a framework to help understand some of the concepts in a MITRE ATTACK style framework. The Microsoft Threat Matrix was explicitly not designed to be a playbook offensive for security professionals and thus it lacks the details necessary to actually exploit (and remediate) each attack in Kubernetes cluster.
This site documents how to develop, deploy, and test a Container Storage Interface (CSI) driver on Kubernetes.
The Container Storage Interface (CSI) is a standard for exposing arbitrary block and file storage systems to containerized workloads on Container Orchestration Systems (COs) like Kubernetes. Using CSI third-party storage providers can write and deploy plugins exposing new storage systems in Kubernetes without ever having to touch the core Kubernetes code.
Ingress NGINX Controller for Kubernetes.
ingress-nginx is an Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer.
Related contents:
- Ingress NGINX Retirement: What You Need to Know @ Kubernetes Contributors.
- Migration assistance from Ingress NGINX to HAProxy Kubernetes Ingress Controller @ HAProxy.
- Another open source project dies of neglect, leaving thousands scrambling @ The Register.
- Navigating the ingress-nginx archival: why now is the time to move to Cilium @ CNCF.
- Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know @ kubernetes.
Production-Grade Container Scheduling and Management.
Kubernetes, also known as K8s, is an open source system for automating deployment, scaling, and management of containerized applications.
Related contents:
- How Kubernetes Works Internally? @ System Design Codex.
- Minimum vital pour survivre sur un sujet Kubernetes @ Téotime Pacreau :fr:.
- Formation Kubernetes : Admin & Développeurs @ DevSecOps :fr:.
- How To Run Kubernetes Commands in Go: Steps and Best Practices @ The New Stack.
- Kubernetes Is Powerful, But Not Secure (at least not by default) @ Tigera.
- Docker to Kubernetes: The 30-Day Migration Path Every Developer Should Know @ Teamcamp's dev.to.
- Beyond the surface - Exploring attacker persistence strategies in Kubernetes @ Raesene's Ramblings.
- The Myths (and Costs) of Running Node.js on Kubernetes @ Platformatic.
- k8s-1m: fully functional Kubernetes cluster with 1 million active nodes.
- Investigating and fixing "StopPodSandbox from runtime service failed" Kubelet errors @ Marcus Noble.
- Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2 @ CNCF.
- How to use AI to make Kubernetes monitoring smarter @ Danlio's Medium.
- Why Kube-State-Metrics Matters for Kubernetes Observability @ weeklycloud's Medium.
- 64GB RAM Kubernetes Cluster for €39/month — Part 1: Proxmox & LVM & NAT @ TrackIT Blog.
- A Practical Guide to Running NVIDIA GPUs on Kubernetes @ jimangel.io.
- Preventing Kubernetes from Pulling the Pause Image from the Internet @ Kyle Cascade.
- Ten Common Kubernetes Misconfigurations That Cause Outages (And What You Can Do About It) @ Cloud Native Now.
- Wrangling Kubernetes contexts @ natkr's ramblings.
- In-place Pod resizing in Kubernetes: How it works and how to use it @ Palark's Blog.
- Kubernetes Metrics: Types, Tools, & Monitoring Guide @ spacelift.
- How to Troubleshoot Common Kubernetes Errors (2025 Guide) @ Spacelift.
- Kubernetes Optimization using In-Place Pod Resizing and Zone-Aware Routing @ halodoc.
- What's Wrong with Kubernetes Today @ DevZero.
- How I think about Kubernetes @ Georgi Arnaudov.
- A Brief Deep-Dive into Attacking and Defending Kubernetes @ Heilan Cyber.
- Le premier intérêt de Kubernetes n'est pas le scaling @ mcorbien.fr :fr:.
- Kubernetes Rolling Updates for Reliable Deployments @ spacelift.
- Kubernetes 1.35 features that change Day 2 operations @ The New Stack.
- How to Setup Kubectl Aliases with Kuberc (Native Method) @ Devopscube.
- Scaling Nodes From Zero - The Bottleneck @ Labyrinth Labs.
- Learn Kubernetes – Full Handbook for Developers, Startups, and Businesses @ freeCodeCamp.
- Managing Kubernetes Secrets with Mozilla SOPS and AGE @ Cyril Baah's Medium.
- Registry mirror authentication with Kubernetes secrets @ CNCF.
- When Kubernetes Is the Wrong Default @ DevOps Daily.
- Why Kubernetes Reliability Is Now a Machine-Speed Problem @ Cloud Native Now.
- The Invisible Rewrite: Modernizing the Kubernetes Image Promoter @ Kubernetes Blog.
- When Kubernetes restarts your pod — And when it doesn’t @ CNCF.
- Why is your Kubernetes cluster adding nodes when the dashboards look fine? @ The New Stack.
- Kubernetes : la solution face aux promesses non tenues du cloud ? @ AXOPEN's ausha :fr:.
- Kubernetes Still Feels Weird? What i wish i knew sooner @ AWS in Plain English's Medium.
- Kubernetes Strategic Merge Patch @ ITNEXT.
- Kubernetes forensics 1/3 : what the container ? @ Synacktiv :fr:.
- Fleet-Scale Kubernetes: An Operating Model for Homogeneous Clusters with Decoupled Capacity @ lucy.sh.
- From Kubernetes Dev Setup to Production: What Actually Changes @ Georg Schwarz.
- How to Encrypt Kubernetes Traffic with cert-manager, Let's Encrypt, and Internal TLS @ freeCodeCamp.
- Comment migrer ses applications de VMs vers Kubernetes ? Bonnes pratiques et outils indispensables ! @ AXOPEN's ausha :fr:.
- Les données dans Kubernetes : comment bien les gérer et les protéger ? @ AXOPEN's YouTube :fr:.
- Where Did My Pod Go? A Deep Dive into K8s Scheduling @ DevOps.dev's Medium.
- Kubernetes in the Age of AI @ O'Reilly Radar.
- What job interviews taught me about Kubernetes @ ~~p.
- Running AI Agents Safely Inside Kubernetes @ KodeKloud.
- How to Become Ridiculously Good at Kubernetes @ F8010's Medium.
- The feedback loops behind Kubernetes @ Planetscale.
- Multi-Cluster Kubernetes Explained @ Cilium.
- Why I haven’t run my databases on Kubernetes @ Percona.
- Operating Kubernetes at scale: a few stories from running Amazon EKS @ The New Stack.
- Kubernetes Is Powerful. It’s Also Way Too Complex for Most Teams That Use It. @ Harsh Kumar's Medium.
- Kubernetes made deploying easy. Nobody warned you about the databases @ TheNewStack.
- Your Pod Died of “Out of Ephemeral Storage” but the Disk Is Half Empty!! @ ITNext's Medium.
- A Green Kubernetes Deployment Does Not Mean a Healthy Application @ Cloud Native Now.
- How Kubernetes probes work @ ngrok.
An open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters.
Kubescape is an open-source Kubernetes security platform. It includes risk analysis, security compliance, and misconfiguration scanning. Targeted at the DevSecOps practitioner or platform engineer, it offers an easy-to-use CLI interface, flexible output formats, and automated scanning capabilities. It saves Kubernetes users and admins precious time, effort, and resources.
Network Observability for the AI Era.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
KubeSkoop is a kubernetes networking diagnose tool for different CNI plug-ins and IAAS providers. KubeSkoop automatic construct network traffic graph of Pod in the Kubernetes cluster, monitoring and analysis of the kernel's critical path by eBPF, to resolve most of Kubernetes cluster network problems.
Find the documentation for all Kubernetes resources, properties, types, and examples.
Deploy a Production Ready Kubernetes Cluster
-
Can be deployed on AWS, GCE, Azure, OpenStack, vSphere, Equinix Metal (bare metal), Oracle Cloud Infrastructure (Experimental), or Baremetal
-
Highly available cluster
-
Composable (Choice of the network plugin for instance)
-
Supports most popular Linux distributions
-
Continuous integration tests
Make shipping applications more enjoyable.
KubeVela is a modern software delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable.
Kubevious (pronounced [kju:bvi:əs]) is a suite of app-centric assurance, validation, and introspection products for Kubernetes. It helps running modern Kubernetes applications without disasters and costly outages by continuously validating application manifests, cluster state, and configuration. Kubevious projects detect and prevent errors(typos, misconfigurations, conflicts, inconsistencies) and violations of best practices. Our secret sauce is based on the ability to validate across multiple manifests and look at the configuration from the application vantage point.
A Kubernetes operator of virtual BMCs that provide Redfish and IPMI services for KubeVirt virtual machines.
Bare-metal provisioning tools like Metal3, Tinkerbell, and Seeder rely on IPMI and Redfish to manage server power state, boot devices, and firmware. KubeVirt virtual machines have none of these interfaces out of the box, making them invisible to existing infrastructure automation.
KubeVirtBMC fills that gap. It is a Kubernetes operator that creates a virtual BMC (Baseboard Management Controller) for each KubeVirt VM, exposing standard IPMI and Redfish endpoints that map directly to Kubernetes-native operations. The result: your VMs become first-class citizens in any bare-metal provisioning pipeline.
Related contents:
Building a virtualization API for Kubernetes.
KubeVirt technology addresses the needs of development teams that have adopted or want to adopt Kubernetes but possess existing Virtual Machine-based workloads that cannot be easily containerized. More specifically, the technology provides a unified development platform where developers can build, modify, and deploy applications residing in both Application Containers as well as Virtual Machines in a common, shared environment.
Related contents:
- Extending KubeVirt Through the Network Binding Plugin @ Oilbeater.
- From Pets to Cattle: The New Mindset for Managing VMs @ The New Stack.
- Your Container Is Not a Sandbox @ Emir Beganović.
- Save the Address, Save the Cloud: A Hands-on KubeVirt Live Migration Workshop @ Tigera.
- Why your KubeVirt VMs can’t move between clusters — and how EVPN fixes it @ The New Stack.
Kubernetes-native Job Queueing.
Kueue is a set of APIs and controller for job queueing. It is a job-level manager that decides when a job should be admitted to start (as in pods can be created) and when it should stop (as in active pods should be deleted).
Related contents:
Lightweight, self-contained Linux® server monitoring tool.
Zero dependencies. No external databases. Single binary. Just deploy and go.
Related contents:
Enterprise Open-Source On-Prem/Private Cloud MTA.
The first Open-Source high-performance MTA developed from the ground-up for high-volume email sending environments.
Cloudflare's component library for building modern web applications.
Kumo provides accessible, design-system-compliant UI components built on Base UI. It handles keyboard navigation, focus management, and ARIA attributes so you can build accessible applications without thinking through every detail.
Related contents:
An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.
Kuna is a self-refining decompiler built to be used by agents. It is based on the Ghidra decompiler, written in Rust, and integrates modern features from other open-source decompilers and research. Kuna is an experiment to see how far agents can take self-refining tools.
git push no-mistakes
no-mistakes puts a local git proxy in front of your real remote. Push to no-mistakes instead of origin, and it spins up a disposable worktree, runs an AI-driven validation pipeline, forwards the branch to the configured push target only after every check passes, and opens a clean PR automatically.
Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS.
Kubernetes native configuration management.
Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into kubectl as apply -k.
Related contents:
Modern open source URL shortener.
Kutt is a modern URL shortener with support for custom domains. Shorten URLs, manage your links and view the click rate statistics.
Kuvasz (pronounce as [ˈkuvɒs]) is an open-source uptime and SSL monitoring service, built in Kotlin.
Kuvasz [ˈkuvɒs], an open-source, self-hosted uptime & SSL monitoring service, designed to help you keep track of your websites and services. It provides a modern, user-friendly interface, a powerful REST API, and supports multiple notification channels like email, Slack, Telegram, and PagerDuty.
An embeddable, scalable, extremely fast graph database.
Embeddable property graph database management system built for query speed and scalability. Implements Cypher. Kuzu is an embedded graph database built for query speed and scalability. Kuzu is optimized for handling complex analytical workloads on very large databases and provides a set of retrieval features, such as a full text search and vector indices. Our core feature set includes:
Related contents:
IoT & Data Science Platform, Platform as-a-Service, Kuzzle PaaS. Activate the power of the Kuzzle IoT platform online, with no commitment.
Kuzzle is a generic backend offering the basic building blocks common to every application.
Open-source Back-end, self-hostable & ready to use - Real-time, storage, advanced search - Web, Apps, Mobile, IoT -
A Flexible Framework for Experiencing Cutting-edge LLM Inference Optimizations.
KTransformers, pronounced as Quick Transformers, is designed to enhance your 🤗 Transformers experience with advanced kernel optimizations and placement/parallelism strategies.
KTransformers is a flexible, Python-centric framework designed with extensibility at its core. By implementing and injecting an optimized module with a single line of code, users gain access to a Transformers-compatible interface, RESTful APIs compliant with OpenAI and Ollama, and even a simplified ChatGPT-like web UI.
A fast, lightweight HTTP client focused on .http file support
A lightweight, fast, and offline-first HTTP debugging tool with first-class support for .http files. No account required. No telemetry. Just you and your APIs.
A distributed key value NoSQL database that uses RocksDB as storage engine and is compatible with Redis protocol.
Kvrocks intends to decrease the cost of memory and increase the capacity while compared to Redis. The design of replication and storage was inspired by rocksplicator and blackwidow.
KWOK stands for Kubernetes WithOut Kubelet.
KWOK is a toolkit that enables setting up a cluster of thousands of Nodes in seconds. Under the scene, all Nodes are simulated to behave like real ones, so the overall approach employs a pretty low resource footprint that you can easily play around on your laptop.
A Simple & Powerful Network Tracing Tool.
Visualize the time packets spend in the kernel, watch & analyze in command line. Capture http/redis/mysql requests/responses in command line.
ESASky is an application that allows to visualize and download public astronomical data.
It's Google Earth but for the night sky :heart_eyes:
Kylin is a high concurrency, high performance and intelligent OLAP engine that provides low-cost and ultimate data analytics experience.
A portable and vast media library solution.
Welcome to Kyoo, the next-generation open-source media browser that redefines your streaming experience. Designed from the ground up, Kyoo stands out as a powerful alternative to Plex and Jellyfin. Unleash the full potential of your media library with cutting-edge features and a commitment to being free and open-source.
A portable and vast media library solution.
Kyoo is a self-hosted media server focused on video content (Movies, Series & Anime). It is an alternative to Jellyfin or Plex.
The type-safe SQL query builder for TypeScript.
Kysely (pronounce “Key-Seh-Lee”) is a type-safe and autocompletion-friendly TypeScript SQL query builder. Inspired by Knex.js. Mainly developed for Node.js but also runs on all other JavaScript environments like Deno, Bun, Cloudflare Workers and web browsers.
Related contents:
A Self-Hostable Wasm Sandbox for JavaScript Workers
Ever wanted to run a Cloudflare Workers-style handler, on a VPS or anywhere, without Node.js, Bun, or even Docker?
Kyushu is an open source CLI that lets you write a JavaScript or TypeScript handler, build it into a self-contained WebAssembly binary, and run it anywhere with one command - kyu.
Kyutai's Speech-To-Text and Text-To-Speech models based on the Delayed Streams Modeling framework.
Kyutai STT is a streaming speech-to-text model architecture, providing an unmatched trade-off between latency and accuracy, perfect for interactive applications. Its support for batching allows for processing hundreds of concurrent conversations on a single GPU.
Related contents:
Unified Policy Observability. Monitoring and Observability Tool for the PolicyReport CRD with an optional UI.
Policy Reporter was created to make the results of your Kyverno validation policies more visible and observable. By default, Kyverno provides the option to create your validation policies in audit or enforce mode. While enforce blocks to applying a manifests that violate the given policy, audit creates PolicyReports that provide information about all resources that pass or fail your policies. Because Policy Reports are simple Custom Resource Definitions you can access them with kubectl get/describe.
Kubernetes Native Policy Management.
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Related contents:
- Vos politiques de conformité sur Kubernetes avec Kyverno @ Zwindler's Reflection :fr:.
- Understanding Kyverno: Enhancing Kubernetes Security with Policy Enforcement @ Jyothi Ram's blog.
- Using the Kyverno CLI to Write Policy Test Cases @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Announcing Kyverno Release 1.15! @ CNCF.
- Optimizing Kyverno CLI performance: My LFX mentorship journey @ CNCF.
- GitOps architecture, patterns and anti-patterns @ Platform Engineering.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Automating Confidential Containers (CoCo) infrastructure with Kyverno @ CNCF.
Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such as the network stack, process table, mount table. Firejail can work in a SELinux or AppArmor environment, and it is integrated with Linux Control Groups.
Open Source Data Labeling.
The most flexible data labeling platform to fine-tune LLMs, prepare training data, or evaluate AI systems. Label Studio is a multi-type data labeling and annotation tool with standardized output format. Label Studio is an open source data labeling tool. It lets you label data types like audio, text, images, videos, and time series with a simple and straightforward UI and export to various model formats. It can be used to prepare raw data or improve existing training data to get more accurate ML models.
Scientific plotting and data analysis. LabPlot is a FREE, open source and cross-platform Data Visualization and Analysis software accessible to everyone.
FREE, open source and cross-platform Data Visualization and Analysis software accessible to everyone and trusted by professionals.
pg_activity is a top like application for PostgreSQL server activity
monitoring.
postgresql_anonymizer is an extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database.
The project is aiming toward a declarative approach of anonymization. This means we’re trying to extend PostgreSQL Data Definition Language (DDL) in order to specify the anonymization strategy inside the table definition itself.
Related contents:
PostgreSQL Remote Control.
temBoard is a powerful management tool for PostgreSQL. It allows to observe, optimize, or configure PostgreSQL instances.
Learning-by-Doing Platform to master Cloud Native craft. Training Challenges for Building DevOps and SRE Skills.
SHAI — Your AI-powered coding assistant. shai is a coding agent, your pair programming buddy that lives in the terminal. Written in rust with love <3
SHAI is a cutting-edge, terminal-based AI assistant designed to simplify your day-to-day development tasks. Whether you're building a website, editing files, running shell commands, or automating complex workflows, Shai has got you covered — all from the comfort of your terminal.
Related contents:
Backupninja allows you to coordinate system backup by dropping a few simple configuration files into /etc/backup.d/. Most programs you might use for making backups don't have their own configuration file format. Backupninja provides a centralized way to configure and schedule many different backup utilities. It allows for secure, remote, incremental filesytem backup (via rdiff-backup), compressed incremental data, backup system and hardware info, encrypted remote backups (via duplicity), safe backup of MySQL/PostgreSQL databases, subversion or trac repositories, burn CD/DVDs or create ISOs, incremental rsync with hardlinking.
Uberlab is a collection of how-to guides for Uberspace 7. It is meant as an addition to the Manual, providing hands-on guides on how to get popular (or even niche) software running on our platform.
Welcome to Ladybird, a truly independent web browser.
We are building a brand-new browser from scratch, backed by a non-profit.
Related contents:
A NEW ERA OF OPEN LARGE-SCALE MULTI-MODAL DATASETS | LAION.
We present a dataset of 5,85 billion CLIP-filtered image-text pairs, 14x bigger than LAION-400M, previously the biggest openly accessible image-text dataset in the world
Integrate seamless commenting functionality into your Laravel project.
Commenter is a feature-rich, modern package with an admin panel designed to address all your commenting needs. With this package, you won't need any additional tools for the comment functionality in your Laravel projects.
Lama Cleaner is a free, open-source and fully self-hostable inpainting tool powered by state-of-the-art AI models. You can use it to remove any unwanted object, defect, people from your pictures or erase and replace anything on your pictures.
Your News, Prioritized by AI.
Stop drowning in RSS feeds. Newsku is a self-hosted RSS reader that uses LLMs to sort your items by importance based on your preferences.
Self-hosted RSS reader that uses LLMs to sort your items by importance based on your preferences.