devops
a fast, scalable, multi-language and extensible build system. Build and test software of any size, quickly and reliably. Bazel is a free software tool for the automation of building and testing of software.
Related contents:
- Adopting Bazel for Web at Scale @ The Airbnb Tech Blog's Medium.
- Optimiser les temps de build avec Bazel et Buildfarm @ Vincent Composieux :fr:.
- (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup @ Jack's home on the web.
- Bazel's Original Sins @ Farid Zakaria's Blog.
- Trusting builds with Bazel remote execution @ Blog System/5.
- Top 5 Monorepo Tools for 2025 @ aviator.
- You are holding BUILD files wrong @ Blog System/5.
Machine management for a container-centric world.
Machine lets you create Docker hosts on your computer, on cloud providers, and inside your own data center. It creates servers, installs Docker on them, then configures the Docker client to talk to them.
he Most Flexible IaC Management Platform.
Spacelift is a sophisticated CI/CD platform for Terraform, Terragrunt, CloudFormation, Pulumi, Kubernetes, and Ansible
Convert your Docker Compose file to Kubernetes or OpenShift.
Kompose is a conversion tool for Docker Compose to container orchestrators such as Kubernetes (or OpenShift).
Related contents:
The package manager for Kubernetes Helm is the best way to find, share, and use software built for Kubernetes. What is Helm?
Helm helps you manage Kubernetes applications — Helm Charts helps you define, install, and upgrade even the most complex Kubernetes application.
Charts are easy to create, version, share, and publish — so start using Helm and stop the copy-and-paste madness.
A specification for adding human and machine readable meaning to commit messages.
Related contents:
A framework for managing and maintaining multi-language pre-commit hooks.
Git hook scripts are useful for identifying simple issues before submission to code review. We run our hooks on every commit to automatically point out issues in code such as missing semicolons, trailing whitespace, and debug statements. By pointing these issues out before code review, this allows a code reviewer to focus on the architecture of a change while not wasting time with trivial style nitpicks.
Related contents:
Ignite a Firecracker microVM. Weave Ignite is an open source Virtual Machine (VM) manager with a container UX and built-in GitOps management.
Analyze assets authorization, who has access to what and how.
universal-data-permissions-scanner (AKA udps) helps DevOps and data engineers quickly understand who has access to what data and how.
DevOps and data engineers are often tasked with managing the security of the databases, data lakes or warehouses they operate. This usually involves setting permissions to enable users to query the data they need. However, as the number of users and use-cases increase, complexity explodes. It's no longer humanly possible to remember who had access to what, how and why, which makes meeting security and compliance requirements impossible.
Ephemeral GitHub Runners with Secure Multi-Tenant Isolation.
ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automates isolated runner provisioning on Kubernetes or EC2, with built-in OIDC, IAM, cost optimization, and deep observability.
Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy. Avoid writing scripts or custom code to deploy and update your applications— automate in a language that approaches plain English, using SSH, with no agents to install on remote systems.
Related contents:
- Ansible: pure (only in its) pragmatism @ Andrej Radović.
- Ansible Dynamic Inventory: Types, How to Use & Examples @ spacelift.
- Ansible Register: How to Store and Reuse Task Output @ spacelift.
- Ansible Service Module: Start, Stop, & Manage Services @ spacelift.
- TXLF 2025 Sat Oct 4 - Getting Started with Ansible on Linux @ Texas Linux Fest's YouTube.
- Ansible-HandsOn @ GitHub.
Whisky is the simplest, framework agnostic, CLI tool for managing and enforcing a php project's git hooks across an entire team.
Docker CLI plugin for extended build capabilities with BuildKit
"putzen" is German and means cleaning. It helps keeping your disk clean of build and dependency artifacts safely.
The open source infrastructure as code tool.
Previously named OpenTF, OpenTofu is a fork of Terraform that is open-source, community-driven, and managed by the Linux Foundation.
Related contents:
- OpenTofu becomes the real deal @ InfoWorld.
- Terraform Compact Function: Clean Up & Simplify Lists @ spacelift.
- How We Migrated 30+ Kubernetes Clusters to Terraform @ Learnings from the paas' Medium.
- The Case for Terraform Modules: Scaling Your Infrastructure Organization @ Infisical.
- Best Practices to Promote from DEV to PROD Environments with HashiCorp Terraform using Workspaces and Folders @ Build5Nines.
- How to Structure a Terraform Project @ Spacelift's dev.to.
- Terraform Stacks - Part 1 - An Introduction @ Mike Guy.
- How to use Terraform to generate secrets @ Techielass.
- Building Meaningful Terraform Test Workflows @ Mark Tinderholt's Medium.
- OpenTofu at Scale: 4 Strategies & Scaling Best Practices @ spacelift.
- Upgrading Our Infrastructure with OpenTofu @ spacelift.
- Terraform vs OpenTofu: Which IaC tool fits your platform strategy? @ Platform Engineering.
- How to Migrate From Terraform to OpenTofu @ Spacelift.
Marketplace of ready-to-use CI/CD templates. Make your GitLab CI/CD simple and reusable.
Telegraf is the open source server agent to help you collect metrics from your stacks, sensors, and systems.
Telegraf is a server-based agent for collecting and sending all metrics and events from databases, systems, and IoT sensors. Telegraf is written in Go and compiles into a single binary with no external dependencies, and requires a very minimal memory footprint.
Find the documentation for all Kubernetes resources, properties, types, and examples.
Automated tests for your infrastructure code.
Terratest is a Go library that provides patterns and helper functions for testing infrastructure, with 1st-class support for Terraform, Packer, Docker, Kubernetes, AWS, GCP, and more.
Related contents:
The Kubernetes Monitoring Helm chart makes it easy to start gathering telemetry data from your Kubernetes clusters. With one deployment, you can capture all of the metrics, logs, traces, and profiles from your cluster and the applications running on it!
Related contents:
Programming Protocol-independent Packet Processors (P4) is a domain-specific language for network devices, specifying how data plane devices (switches, NICs, routers, filters, etc.) process packets.
Trustable Automation. Steampunk Spotter provides an Assisted Automation Writing tool that analyzes and offers recommendations for your Ansible Playbooks.
Open-Source Feature Flag Management for Enterprises.
Unleash is an open source feature management solution. It improves the workflow of your development team and leads to quicker software delivery. Unleash increases efficiency and gives teams full control of how and when they enable new functionality for end users. Unleash lets teams ship code to production in smaller releases whenever they want.
Open Source Alternative to Vercel, Netlify and Heroku.
Effortless Deployment Solutions. Deploy Anywhere with Total Freedom and Ease. Streamline your operations with our all-in-one platform—perfect for managing projects, data, and system health with simplicity and efficiency.
Dokploy is a free self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases using Docker and Traefik. Designed to enhance efficiency and security, Dokploy allows you to deploy your applications on any VPS.
Related contents:
Cloud-Native Load-balancer.
loxilb is an open source cloud-native load-balancer based on GoLang/eBPF with the goal of achieving cross-compatibility across a wide range of on-prem, public-cloud or hybrid K8s environments. loxilb is being developed to support the adoption of cloud-native tech in telco, mobility, and edge computing.
The Platform Powering the API World. 🦍 The Cloud-Native API Gateway.
Kong or Kong API Gateway is a cloud-native, platform-agnostic, scalable API Gateway distinguished for its high performance and extensibility via plugins.
By providing functionality for proxying, routing, load balancing, health checking, authentication (and more), Kong serves as the central layer for orchestrating microservices or conventional API traffic with ease.
A fully functional local cloud stack. Develop and test your cloud and serverless apps offline!
LocalStack is an easy-to-use test/mocking framework for developing cloud applications. Using LocalStack, you can spin up a local test environment in seconds, and get the same functionality you would get from a real AWS environment.
Fix Inventory is an open-source cloud asset inventory tool for infrastructure and security engineers.
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
Fix Inventory enables a broad set of exploration and automation scenarios. Its foundation is a graph-based data model, which exposes resource metadata and dependency relationships between your service's assets.
A powerful CLI allows you to search, explore, and manage your cloud resources.
Related contents:
Automated Self-Hosted Dev Environments.
🪄 Spin up ready-to-code, disposable dev environments on your own servers. Self-hosted alternative to Gitpod and Github Codespaces.
Open-source hyperconverged infrastructure.
The open source hyperconverged infrastructure (HCI) solution for a cloud native world. Harvester is a modern, open, interoperable, hyperconverged infrastructure (HCI) solution built on Kubernetes. It is an open-source alternative designed for operators seeking a cloud-native HCI solution. Harvester runs on bare metal servers and provides integrated virtualization and distributed storage capabilities. In addition to traditional virtual machines (VMs), Harvester supports containerized environments automatically through integration with Rancher. It offers a solution that unifies legacy virtualized infrastructure while enabling the adoption of containers from core to edge locations.
Build better APIs faster. Open source API management platform.
Redefined API management for developers. Quickly add API keys, rate limiting, and usage analytics to your API at any scale.
A K8s operator to reduce CO2 footprint of your clusters.
How many of your dev/preview pods stay on during weekends? Or at night? It's a waste of resources! And money! But fear not, kube-green is here to the rescue.
kube-green is a simple k8s addon that automatically shuts down (some of) your resources when you don't need them.
Related contents:
The ultimate ssh powered services for developers.
Our mission is to enable developers with services that help them rapidly prototype on the web. We want to make it easier than ever for developers to share their projects with the world.
Automatically manage Cloudflare DNS from Docker container labels. Simplifies DNS for Docker/Compose. Inspired by External-DNS but built specifically for docker environments and homelabs.
Sherpa-DNS is a python application designed to create and manage DNS records for services defined in docker compose stacks or stand-alone docker containers via labels. It draws inspiration from the Kubernetes External-DNS project but is specifically tailored for docker environments.
A tool to generate Kubernetes manifests from templates.
A powerful tool for generating ArgoCD Applications and their rendered Kubernetes resources from Helm, Kustomize, and Jinja2 — across multiple environments, at scale.
JobSet: a k8s native API for distributed ML training and HPC workloads
JobSet is a Kubernetes-native API for managing a group of k8s Jobs as a unit. It aims to offer a unified API for deploying HPC (e.g., MPI) and AI/ML training workloads (PyTorch, Jax, Tensorflow etc.) on Kubernetes.
Related contents:
Effortlessly deploy apps using a container — minimal know-how required.
Infinite OS is a container operating system designed to allow you to deploy applications knowing little to nothing about containers. It comes with a user-friendly dashboard, REST API, and CLI for seamless container management.
Terraform-style, declarative schema migration for Postgres.
pgschema is a CLI tool that brings terraform-style declarative schema migration workflow to Postgres.
SAFe® for Lean Enterprises is a knowledge base of proven, integrated principles, practices, and competencies for achieving business agility using Lean, Agile, and DevOps.
Dans cette université nous vous proposons de découvrir Pulumi en mettant en lumière ses points forts comme la programmation multi-langages, la possibilité de mieux tester son code, d'avoir une couche d'abstraction multi-cloud plus efficace et même la capacité de réaliser de véritables applications web modernes de déploiement ...
Related contents:
kubectl plugin to list allocations (cpu, memory, gpu,... X utilization, requested, limit, allocatable,...).
kubectl plugin lists allocations for resources (cpu, memory, gpu,...) as defined into the manifest of nodes and running pods. It doesn't list usage like kubectl top. It can provide result grouped by namespaces, nodes, pods and filtered by resources'name.
Preevy is a powerful CLI tool designed to simplify the process of creating ephemeral preview environments. Using Preevy, you can easily provision any Docker-Compose application on AWS using affordable Lightsail, Google Cloud, or Microsoft Azure VMs (support for more cloud providers is on the way).
An open-source incident management tool supporting multi-channel alerting, customizable messages, and on-call integrations.
Open-source developer platform and workflow engine. Turn scripts into auto-generated UIs, APIs and cron jobs. Compose them as workflows or data pipelines. Build complex, data-intensive apps with ease.
Write and deploy software 10x faster, and run it with the highest reliability and observability on the fastest self-hostable job orchestrator.
Open-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.
Container Machines - Containers that look like Virtual Machines. footloose creates containers that look like virtual machines. Those containers run systemd as PID 1 and a ssh daemon that can be used to login into the container. Such "machines" behave very much like a VM, it's even possible to run dockerd in them :)
You can use this tool to generate a valid Permissions Policy HTTP Header, which can be provided by your web server / web application in order to improve the security of your visitors and the data they may be accessing on your site.
Declarative GitOps CD for Kubernetes. Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
Related contents:
- How to Build a Multi-Tenancy Internal Developer Platform with GitOps and vCluster @ ITNEXT's Medium.
- Unleashing the Power of ArgoCD by Streamlining Kubernetes Deployments @ sitepoint.
- Using ArgoCD ApplicationSet to deploy to multiple clusters @ ITNEXT's Medium.
- Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops @ Container Hub's Medium.
- How Engineers are Automating More with Less: Trends in DevOps Tooling @ DevOps.
- Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management @ Linux Journal.
- Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2 @ CNCF.
- Anatomy of a Pull Request Generator @ Codefresh.
- Manage Multi-Cluster Deployments with ArgoCD @ DigitalOcean.
- Behind the scenes: Designing Argo CD in Octopus @ Octopus Deploy.
- ArgoCD diffs at scale @ monday engineering.
- How to scale GitOps in the enterprise: From single cluster to fleet management @ Platform Engineering.
- Argo CD 3.3 Brings Safer GitOps Deletions and Smoother Day‑to‑Day Operations @ InfoQ.
- Introduction to ArgoCD: Getting Started with GitOps @ DevOps Daily.
- How to Implement GitOps on Kubernetes Using Argo CD @ freeCodeCamp.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Security Flaw in Argo CD Can Let Attackers Take Over Kubernetes Clusters @ Cloud Native Now.
The AI-First Operations Platform. Transform Your Operations.
Reduce business risk and build operational resilience on the AI Operations Platform.
Related contents:
NIST Certified SCAP 1.2 toolkit. The oscap program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.
The OpenSCAP ecosystem provides multiple tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines. We maintain great flexibility and interoperability, reducing costs of performing security audits.
Related contents:
Kube Resource Orchestrator. Powerful Abstractions for Kubernetes.
Kube Resource Orchestrator (kro) helps you to define complex multi-resource constructs as reusable components in your applications and systems. It does this by providing a Kubernetes-native, vendor agnostic way to define groupings of Kubernetes resources.
Related contents:
Declarative CLI Version Manager. Unify tool versions in teams, projects, and CI. Easy, painless, and secure.
Declarative CLI Version manager written in Go. Support Lazy Install, Registry, and continuous update with Renovate. CLI version is switched seamlessly
Modern Open Source Build Automation.
Gradle is a build tool with a focus on build automation and support for multi-language development. If you are building, testing, publishing, and deploying software on any platform, Gradle offers a flexible model that can support the entire development lifecycle from compiling and packaging code to publishing web sites. Gradle has been designed to support build automation across multiple languages and platforms including Java, Scala, Android, Kotlin, C/C++, and Groovy, and is closely integrated with development tools and continuous integration servers including Eclipse, IntelliJ, and Jenkins.
Related contents:
Total visibility of your software engineering lifecycle.
Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.
Using Chalk, you can build a graph connecting development and production, so that devops engineers understand what is happening in the development process, and so that developers can understand what is happening in the infrastructure. With this information they can work better together.
Just-in-time Nodes for Any Kubernetes Cluster.
Karpenter simplifies Kubernetes infrastructure with the right nodes at the right time.
Karpenter automatically launches just the right compute resources to handle your cluster's applications. It is designed to let you take full advantage of the cloud with fast and simple compute provisioning for Kubernetes clusters.
Related contents:
- What Karpenter v1.0.0 means for Kubernetes autoscaling @ Cloud Native.
- Tranches de Tech 13 - De la tech et du coeur :fr:.
- Façonnez Votre Cloud avec Karpenter : Les Secrets du Maître Charpentier du Numérique @ GDG France's YouTube :fr:.
- Implementing Karpenter In EKS (From Start To Finish) @ Cloud Native Deep Dive.
- Scaling Nodes From Zero - The Bottleneck @ Labyrinth Labs.
- Understanding Karpenter architecture for Kubernetes autoscaling @ Datadog.
- Key metrics for monitoring Karpenter @ Datadog.
- Karpenter + Cluster API @ A cup of coffee.
- Networking Is Still Hard @ AWS Fundamentals.
Kubernetes distribution for bare-metal, on-prem, edge, IoT.
k0s is the simple, solid & certified Kubernetes distribution that works on any infrastructure: bare-metal, on-premises, edge, IoT, public & private clouds. It's 100% open source & free.
Related contents:
Manage your GitHub Actions from Terminal with great UI 🧪
GAMA is a powerful terminal-based user interface tool designed to streamline the management of GitHub Actions workflows. It allows developers to list, trigger, and manage workflows with ease directly from the terminal.
Flux is a set of continuous and progressive delivery solutions for Kubernetes that are open and extensible.
Related contents:
- (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup @ Jack's home on the web.
- Rebuilding My Talos Cluster from Bare Metal @ Nerdz.
- How to scale GitOps in the enterprise: From single cluster to fleet management @ Platform Engineering.
- Bootstrapping Flux with Terraform, the right way @ Flux.
The deployment tool for PHP.
The PHP deployment tool with support for popular frameworks out of the box.
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit.
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
Related contents:
Find & Fix Open Source vulnerabilities. Get real-time security alerts and compliance issues on your open source dependencies within Azure DevOps or GitHub.