devops
a fast, scalable, multi-language and extensible build system. Build and test software of any size, quickly and reliably. Bazel is a free software tool for the automation of building and testing of software.
Related contents:
- Adopting Bazel for Web at Scale @ The Airbnb Tech Blog's Medium.
- Optimiser les temps de build avec Bazel et Buildfarm @ Vincent Composieux :fr:.
- (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup @ Jack's home on the web.
- Bazel's Original Sins @ Farid Zakaria's Blog.
- Trusting builds with Bazel remote execution @ Blog System/5.
- Top 5 Monorepo Tools for 2025 @ aviator.
- You are holding BUILD files wrong @ Blog System/5.
Total visibility of your software engineering lifecycle.
Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.
Using Chalk, you can build a graph connecting development and production, so that devops engineers understand what is happening in the development process, and so that developers can understand what is happening in the infrastructure. With this information they can work better together.
Terraform provides a common configuration to launch infrastructure — from physical and virtual servers to email and DNS providers. Once launched, Terraform safely and efficiently changes infrastructure as the configuration is evolved.
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Related contents:
Automatically manage Cloudflare DNS from Docker container labels. Simplifies DNS for Docker/Compose. Inspired by External-DNS but built specifically for docker environments and homelabs.
Sherpa-DNS is a python application designed to create and manage DNS records for services defined in docker compose stacks or stand-alone docker containers via labels. It draws inspiration from the Kubernetes External-DNS project but is specifically tailored for docker environments.
Scale down Kubernetes deployments after work hours.
Scale down / "pause" Kubernetes workload (Deployments, StatefulSets, and/or HorizontalPodAutoscalers and CronJobs too !) during non-work hours.
Kubernetes Live Cluster Linter. A Kubernetes cluster resource sanitizer.
Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestrate a cluster. Popeye scans your cluster based on what’s deployed and not what’s sitting on disk. By linting your cluster, it detects misconfigurations, stale resources and assists you to ensure that best practices are in place, thus preventing future headaches. It aims at reducing the cognitive overload one faces when operating a Kubernetes cluster in the wild. Furthermore, if your cluster employs a metric-server, it reports potential resources over/under allocations and attempts to warn you should your cluster run out of capacity.
A Graphical IDE for Kubernetes.
Freelens is a Kubernetes IDE that provides a graphical interface for managing and monitoring Kubernetes clusters. Freelens is maintained by the community.
Freelens is a free and open-source user interface designed for managing Kubernetes clusters. It provides a standalone application compatible with macOS, Windows, and Linux operating systems, making it accessible to a wide range of users. The application aims to simplify the complexities of Kubernetes management by offering an intuitive and user-friendly interface.
Open-source developer platform and workflow engine. Turn scripts into auto-generated UIs, APIs and cron jobs. Compose them as workflows or data pipelines. Build complex, data-intensive apps with ease.
Write and deploy software 10x faster, and run it with the highest reliability and observability on the fastest self-hostable job orchestrator.
Open-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.
Manage your kubeconfig more easily.
List, switch, add, delete and more interactive operations to manage kubeconfig. It also supports kubeconfig management from cloud.
Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql instances with data replication and failover enabled out-of-the box. It brings simplicity when using PostgreSql considering how complex managing stateful-set's life-cycle and data replication could be with Kubernetes.
Purpose-built OS for Kubernetes, fully managed by Kubernetes. k3OS is a Linux distribution designed to remove as much OS maintenance as possible in a Kubernetes cluster. It is specifically designed to only have what is needed to run k3s. Additionally the OS is designed to be managed by kubectl once a cluster is bootstrapped. Nodes only need to join a cluster and then all aspects of the OS can be managed from Kubernetes. Both k3OS and k3s upgrades are handled by the k3OS operator.
One easy way to configure all your workloads. Everywhere.
The Score Specification provides a developer-centric and platform-agnostic Workload specification to improve developer productivity and experience. It eliminates configuration inconsistencies between environments.
Related contents:
Kubernetes Event-driven Autoscaling.
KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
Related contents:
A dynamic docker->redis->traefik discovery agent.
Solves the problem of running a non-Swarm/Kubernetes multi-host cluster with a single public-facing traefik instance.
traefik-kop solves this problem by using the same traefik docker-provider logic. It reads the container labels from the local docker node and publishes them to a given redis instance. Simply configure your traefik node with a redis provider and point it to the same instance, as in the diagram above.
Given a version number MAJOR.MINOR.PATCH, increment the:
MAJOR version when you make incompatible API changes,
MINOR version when you add functionality in a backwards compatible manner, and
PATCH version when you make backwards compatible bug fixes.
Additional labels for pre-release and build metadata are available as extensions to the MAJOR.MINOR.PATCH format.
Cedar is a language for defining permissions as policies, and a specification for evaluating those policies. Use Cedar to define who is authorized to do what within your application. Cedar is open source.
Related contents:
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
- Trivy @ GitHub.
- Trivy Documentation.
- Integrer la sécurité dés le départ avec Trivy @ Culture et Outils DevSecOps :fr:.
- Trivy Is Noise by Default, Here’s the Seven-Rule Filter That Catches Real Risk @ DevOpsDynamo's Medium.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- 20 Days Later: Trivy Compromise, Act II @ Boost Security Labs.
- Trivy supply chain compromise: What Docker Hub users should know @ Docker blog.
- Trivy compromis une seconde fois : la release v0.69.4 était empoisonnée @ DevSecOps :fr:.
- When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem @ aqua.
Kubernetes for Prod, Tilt for Dev. A toolkit for fixing the pains of microservice development. Define your dev environment as code. For microservice apps on Kubernetes.
Tilt powers microservice development and makes sure they behave! Run tilt up to work in a complete dev environment configured for your team.
Tilt automates all the steps from a code change to a new process: watching files, building container images, and bringing your environment up-to-date. Think docker build && kubectl apply or docker-compose up.
Related contents:
Installs ucacher (Earthly Universal Caching) in a GHA job.
ucacher is a CLI tool that tracks which files are accessed by commands, skips unnecessary executions, and restores cached outputs when possible, resulting in significantly reduced execution times.
Runtime type-checking for Ruby. Enums, properties, generics, structured objects. Type-check object properties at runtime.
Kubernetes native configuration management.
Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into kubectl as apply -k.
Related contents:
MetalLB is a load-balancer implementation for bare metal Kubernetes clusters, using standard routing protocols.
Related contents:
Run a cloud exit assessment on your infrastructure to gain insights into the challenges and constraints of a potential cloud exit.
cloudexit is an open-source tool that empowers cloud engineers to conduct comprehensive cloud exit assessments. It helps identify and evaluate the risks associated with their cloud environment while providing actionable insights into the challenges and constraints of transitioning away from their current cloud provider. By leveraging EscapeCloud Community Edition, organizations can better prepare for a potential cloud exit, ensuring a smoother and more informed decision-making process.
A K9s-inspired terminal UI for Flux resources, controller health, and GitOps state.
Related contents:
unclutter your .profile. direnv is an extension for your shell. It augments existing shells with a new feature that can load and unload environment variables depending on the current directory.
A Process Control System. Supervisor is a client/server system that allows its users to monitor and control a number of processes on UNIX-like operating systems.
It shares some of the same goals of programs like launchd, daemontools, and runit. Unlike some of these programs, it is not meant to be run as a substitute for init as “process id 1”. Instead it is meant to be used to control processes related to a project or a customer, and is meant to start like any other program at boot time.
A crowdsourced, open-source gallery for high-quality dev docs.
Comprehensive Open Source Security and SBOM Management. Secure Your Products From Repo to Release.
Stop vulnerabilities, automate compliance, and mitigate third-party risk in your applications.
Programming Protocol-independent Packet Processors (P4) is a domain-specific language for network devices, specifying how data plane devices (switches, NICs, routers, filters, etc.) process packets.
Jenkins automation server.
Jenkins is the leading open-source automation server. Built with Java, it provides over 1,800 plugins to support automating virtually anything, so that humans can spend their time doing things machines cannot.
Related contents:
- Mastering Docker and Jenkins: Build Robust CI/CD Pipelines Efficiently @ Docker blog.
- GitHub Actions vs. Jenkins: Which one's right for your team? @ Buildkite.
- Jenkins’ Flexibility is its Greatest Strength and its Achilles Heel @ CloudBees.
- CI/CD in Production with Jenkins – Complete DevOps Course @ freeCodeCamp.org's YouTube.
- The Jenkins Threat Landscape @ WIZ.
- CI/CD Testing Tools Compared: the Same Pipeline in GitHub Actions, GitLab CI and Jenkins @ DAYAN ELVIS JAHUIRA PILCO's dev.to.
- Is Jenkins Dead? No, And That's Much Worse @ DevOps & AI Toolkit's YouTube.
One framework for creating powerful cross-platform games.
MonoGame is a simple and powerful .NET framework for creating games for desktop PCs, video game consoles, and mobile devices using the C# programming language. It has been successfully used to create games such as Streets of Rage 4, Carrion, Celeste, Stardew Valley, and many others.
AIOps modules is a collection of reusable Infrastructure as Code (IaC) modules for Machine Learning (ML), Foundation Models (FM), Large Language Models (LLM) and GenAI development and operations on AWS
Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.
Related contents:
Learning-by-Doing Platform to master Cloud Native craft. Training Challenges for Building DevOps and SRE Skills.
Run Locally, Deploy Globally
Develop and test your AWS applications locally to reduce development time and increase product velocity. Reduce unnecessary AWS spend and remove the complexity and risk of maintaining AWS dev accounts
Related contents:
Transform your Messy CI Scripts into Clean Code. Develop Your CI/CD Pipelines as Code and Run Them Anywhere.
Powerful, programmable open source CI/CD engine that runs your pipelines in containers — pre-push on your local machine and/or post-push in CI. Dagger is a tool that lets you replace your software project's artisanal scripts with a modern API and cross-language scripting engine.
Related contents:
CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code.
Related contents:
Python app implementing a read-through cache for Bitwarden Secrets Manager (BWS) secrets.
When a secret is queried, not only is the secret cached in memory, but a mapping between ID and key is also cached. This allows lookup by either ID or key, as shown below.
infrastructure made simple with Python.WS for Python devs - made simple.
Build AWS apps in high-level Python with smart defaults. Keep full control when you need it. No YAML, JSON or HSL. No clicking through consoles. No configuration hell.
Stelvio is a Python framework that simplifies AWS cloud infrastructure management and deployment. It lets you define your cloud infrastructure using pure Python, with smart defaults that handle complex configuration automatically.
Cloud-init is the industry standard multi-distribution method for cross-platform cloud instance initialization. It is supported across all major public cloud providers, provisioning systems for private cloud infrastructure, and bare-metal installations.
Minimal CVE Hardened container image collection.
A collection of production-ready container images with minimal CVEs, rebuilt daily using Chainguard's apko and Wolfi packages. By including only required packages, these images maintain a reduced attack surface and typically have zero or near-zero known vulnerabilities.
Related contents:
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Mago (derived from Mago (Punic: 𐤌𐤂𐤍, MGN), a renowned Carthaginian figure) is a toolchain for PHP that aims to provide a set of tools to help developers write better code. Mago draws inspiration from the Rust programming language and its ecosystem, striving to bring similar convenience, reliability, and a great developer experience to the PHP world.
Keep builds green with a highly customizable merge queue
Deploy more PRs while cutting CI runtimes. Easily merge changes into a massive monorepo, and run custom CI validations without breaking builds.
Related contents:
Cleaner is a Kubernetes controller that identifies unused or unhealthy resources, helping you maintain a streamlined and efficient Kubernetes cluster. It provides flexible scheduling, label filtering, Lua-based selection criteria, resource removal or update and notifications via Slack, Webex and Discord. it can also automate clusters operations.
A compiled list of links to public failure stories related to Kubernetes. Most recent publications on top.
Related contents:
Automate your GitHub Pull Requests.
🔮 A bot to automatically update and merge GitHub PRs.
Blackfire APM Observability From Development to Production Monitor, profile and test your application even before it is released in production. Get actionable insights to improve your code rather than spend time figuring out what’s wrong. Ensure optimal performance and user experience for your web applications.
Build better APIs faster. Open source API management platform.
Redefined API management for developers. Quickly add API keys, rate limiting, and usage analytics to your API at any scale.
Squest is a self-service portal that works on top of Red Hat Ansible Automation Platform/AWX.
An open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters.
Kubescape is an open-source Kubernetes security platform. It includes risk analysis, security compliance, and misconfiguration scanning. Targeted at the DevSecOps practitioner or platform engineer, it offers an easy-to-use CLI interface, flexible output formats, and automated scanning capabilities. It saves Kubernetes users and admins precious time, effort, and resources.
Trust Your Deployments.
Easily handle Kubernetes deployments of any size, complexity, and across various environments using Kluctl. The missing glue to put together large Kubernetes deployments, composed of multiple smaller parts (Helm/Kustomize/...) in a manageable and unified way.
Related contents:
Lightweight Kubernetes. Production ready, easy to install, half the memory, all in a binary less than 100 MB.
The certified Kubernetes distribution built for IoT & Edge computing.
Related contents:
Elixir ❤️ Embedded
Nerves is an open-source platform that combines the rock-solid BEAM virtual machine and Elixir ecosystem to easily build and deploy production embedded systems.
Related contents:
Push docker images directly to remote servers without an external registry.
Unregistry is a lightweight container image registry that stores and serves images directly from your Docker daemon's storage.
The included docker pussh command (extra 's' for SSH) lets you push images straight to remote Docker servers over SSH. It transfers only the missing layers, making it fast and efficient.
The global home for Platform Engineers
Join the #1 platform engineering community. Learn from leading DevOps and cloud native experts. Connect with fellow platform practitioners.
The Kubernetes Monitoring Helm chart makes it easy to start gathering telemetry data from your Kubernetes clusters. With one deployment, you can capture all of the metrics, logs, traces, and profiles from your cluster and the applications running on it!
Related contents:
Open Source, Multi Cloud, Analytics, IaC, more. Provision. Query. Secure.
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework. Deploy, manage and query cloud resources and interact with APIs using SQL.
Related content:
Like Prometheus, but for logs.
Grafana Loki is a set of open source components that can be composed into a fully featured logging stack. A small index and highly compressed chunks simplifies the operation and significantly lowers the cost of Loki.
Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log stream.
The easiest way to distribute enterprise software.
🧊 The next generation Package Manager for Kubernetes 📦 Featuring a GUI and a CLI. Glasskube packages are dependency aware, GitOps ready and can get automatic updates via a central public package repository.