kubernetes
A Kubernetes operator of virtual BMCs that provide Redfish and IPMI services for KubeVirt virtual machines.
Bare-metal provisioning tools like Metal3, Tinkerbell, and Seeder rely on IPMI and Redfish to manage server power state, boot devices, and firmware. KubeVirt virtual machines have none of these interfaces out of the box, making them invisible to existing infrastructure automation.
KubeVirtBMC fills that gap. It is a Kubernetes operator that creates a virtual BMC (Baseboard Management Controller) for each KubeVirt VM, exposing standard IPMI and Redfish endpoints that map directly to Kubernetes-native operations. The result: your VMs become first-class citizens in any bare-metal provisioning pipeline.
Related contents:
OpenPERouter (Provider Edge Router) meant to run on linux and to interact with the host through veths.
OpenPERouter is an open implementation of a Provider Edge (PE) router, designed to terminate multiple VPN protocols on Kubernetes nodes and expose a BGP interface to the host network.
Related contents:
Open-Source Kubernetes Desktop Client Built in Rust. The Kubernetes control room for engineers and AI agents.
Investigate, analyse, and take safe action across Kubernetes clusters from one local-first desktop workspace, built with a pure-Rust core. Backend capabilities are also available to AI agents through MCP.
The sysadmin that watches your entire infrastructure 24/7. Monitoring for Proxmox, Docker, Kubernetes, TrueNAS and vSphere.
Pulse brings Proxmox, Docker, Kubernetes, TrueNAS and vSphere into a single self-hosted workspace, with a page for every platform and alerts that tell you the moment something breaks.
Related contents:
Kubernetes GitOps with nix and Argo CD.
Managing Kubernetes configurations at scale is hard. Helm charts require complex value overrides, Kustomize leads to repetitive overlays, and raw YAML becomes unmaintainable. Reviewing changes across environments is nearly impossible.
Nixidy solves this by bringing the power of Nix and the NixOS module system to Kubernetes.
Related contents:
zeedumper connects to a Kubernetes cluster using your kubeconfig and dumps component z-pages — flagz, statusz, and configz — retrieving them through the API server proxy. The only credentials in play are those in your kubeconfig; the tool is read-only and never mutates the cluster.
It presents the results as structured text, JSON, or a self-contained HTML page.
MCP Server for kubernetes management commands.
MCP Server that can connect to a Kubernetes cluster and manage it. Supports loading kubeconfig from multiple sources in priority order.
Related contents:
Deploy Cloud Native Applications inside Confidential Enclaves Protect containers while they are running using confidential computing and hardware-backed isolation.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
Related contents:
Network Observability for the AI Era.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
AI SRE AgenticOps for Kubernetes and cloud infrastructure. Your infrastructure can explain itself, heal safely, and prove it recovered.
Flawless is an AI-native SRE control plane for Kubernetes and cloud infrastructure. It connects alerts, evidence, topology, human approval, controlled remediation, and recovery verification in one auditable AgenticOps loop.
A Kubernetes controller that generates CycloneDX 1.6 ML-BOM documents for AI workloads at runtime — inference services, agent stacks, RAG pipelines, training jobs, evaluation harnesses — with auditor-traceable evidence for every attribute.
Related contents:
YISP is a Lisp-inspired evaluation engine for YAML – useful for generating Kubernetes manifests, configuration files, and more.
YISP (suggested pronunciation: /ˈjɪsp/) is a lightweight evaluation engine for YAML, inspired by Lisp. It allows you to embed logic, expressions, and includes within YAML files. This is useful for generating structured configuration such as Kubernetes manifests, Ansible playbooks, and more.
Related contents:
The Application Development Engine for Kubernetes Tame your developer workflow to go from Code to URL in one push.
Epinio installs into any Kubernetes cluster to bring your application from source code to deployment and allow for Developers and Operators to work better together!
Related contents:
Agent Substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.
Related contents:
Providing the building blocks for creating modern, cloud-based applications.
The easiest way to build and run serverless workloads on Kubernetes. Built by the community, for modern cloud-native teams
Related contents:
Automate Kubernetes Configuration Editing.
kpt is a package-centric toolchain that enables a WYSIWYG configuration authoring, automation, and delivery experience, which simplifies managing Kubernetes platforms and KRM-driven infrastructure at scale by manipulating declarative Configuration as Data.
Related contents:
ku is short for KUbernetes. It is also the Norwegian word for cow.
A fast, keyboard-driven Kubernetes TUI. Browse any resource, edit objects, follow logs, and shell into pods.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Related contents:
Cluster API is a Kubernetes sub-project focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters.
Related contents:
Kubernetes-native Job Queueing.
Kueue is a set of APIs and controller for job queueing. It is a job-level manager that decides when a job should be admitted to start (as in pods can be created) and when it should stop (as in active pods should be deleted).
Related contents:
Treat environments as configuration and eliminate code duplication, custom bash scripts, and complicated tooling with one tool to rule them all.
👽 Terraform Orchestration Tool for DevOps. Keep environment configuration DRY with hierarchical imports of configurations, inheritance, and WAY more. Native support for Terraform and Helmfile.
A Go CLI tool that scans rendered Kubernetes/Helm manifests and produces a CSV & JSON report of security misconfigurations.
Kubernetes in the browser.
This project is a port of a subset of the Kubernetes project to make it such that clusters can be booted up in the browser, without any backend server components.
Related contents:
Automatic DNS management for Docker, Kubernetes, and Proxmox VE workloads with multi-provider support.
dnsweaver watches Docker events, Kubernetes resources, and Proxmox VE clusters to automatically create and delete DNS records. Unlike single-provider or single-platform tools, dnsweaver supports split-horizon DNS, multiple DNS providers simultaneously, and works across Docker, Docker Swarm, Kubernetes, and Proxmox VE — or all of them at once.
Related contents:
A native Kubernetes desktop client — nothing in your cluster. Helm, Argo CD, Flux CD, Gateway API & cert-manager built in. MIT-licensed.
DX-focused control plane for Postgres dedicated to non-critical workloads. Your postgres:latest replacement 🐘
NeonD is an open-source Neon-based control plane daemon for PostgreSQL. It offers S3-based layer durability, instant branching, precise Point-in-time recovery in seconds. Runs as a single Docker container, handles multi-tenant PostgreSQL instances seamlessly.
Agent substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.
Related contents:
tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.
It manages the packaging, deployment and execution of Gadgets (eBPF programs encapsulated in OCI images) and provides mechanisms to customize and extend Gadget functionality.
Related contents:
Lightning Fast Kubernetes navigator.
⚡ LFK is a lightning-fast, keyboard-focused, yazi-inspired terminal user interface for navigating and managing Kubernetes clusters. Built for speed and efficiency, it brings a three-column Miller columns layout with an owner-based resource hierarchy to your terminal.
AI powered Kubernetes Assistant.
kubectl-ai acts as an intelligent interface, translating user intent into precise Kubernetes operations, making Kubernetes management more accessible and efficient.
External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, CyberArk Secrets Manager, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret.
Related contents:
Kubernetes for Local LLMs.
A Kubernetes operator for self-hosted LLM inference. vLLM, llama.cpp, TGI, NVIDIA, Apple Silicon.
Related contents:
Customization of kubernetes YAML configurations.
kustomize lets you customize raw, template-free YAML files for multiple purposes, leaving the original YAML untouched and usable as is.
kustomize targets kubernetes; it understands and can patch kubernetes style API objects. It's like make, in that what it does is declared in a file, and it's like sed, in that it emits edited text.
A multi-tenancy and policy-based framework for Kubernetes.
Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with the minimalist approach, leveraging only on upstream Kubernetes.
The missing open-source Kubernetes UI.
Topology, events, Helm, GitOps, image inspection, audits, and MCP for AI agents - all in one open-source Kubernetes UI. Run it locally as a single binary or self-host in your cluster.
CO2 monitoring and FinGreenOps tool for K8s. Measure, understand, and reduce the carbon footprint of your Kubernetes infrastructure.
GreenKube is an open-source FinGreenOps platform for Kubernetes. It gives DevOps, SRE, and FinOps teams real-time carbon visibility and cost control — without complex setup or expensive SaaS tooling.
A ground-up reimplementation of Kubernetes in Rust.
Rūsternetes includes a built-in web console with real-time cluster topology visualization, live metrics, pod log streaming, and full resource management. It deploys automatically — embedded in the API server, no separate installation.
Kubernetes Orphaned Resources Finder.
A Golang Tool to discover unused Kubernetes Resources.
Homogeneous Kubernetes clusters at scale on any infrastructure using hosted control planes. A Managed Kubernetes Service Done Right. Deliver fully-managed clusters at scale everywhere with your own Gardener installation.
Gardener implements the automated management and operation of Kubernetes clusters as a service and provides a fully validated extensibility framework that can be adjusted to any programmatic cloud or infrastructure provider.
Open Source Container Runtime Software.
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
Related contents:
Kubernetes Progressive Delivery Controller.
Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities such as blue-green, canary, canary analysis, experimentation, and progressive delivery features to Kubernetes.
Kubernetes AI Toolchain Operator.
KAITO is an operator that automates the AI/ML model inference or tuning workload in a Kubernetes cluster. The target models are popular open-sourced large models such as falcon and phi-3.
Related contents:
agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.
Related contents:
Complete guide explaining how to build and run a virtualized small Kubernetes cluster with a single Proxmox VE standalone node on a single computer.
Jurassic Park Unix System style Kubernetes resource viewer.
A 3D Kubernetes resource viewer inspired by the FSN (File System Navigator) from Jurassic Park. Fly through your cluster like it's 1993.
Related contents:
A compiled list of links to public failure stories related to Kubernetes. Most recent publications on top.
Related contents:
Cleaner is a Kubernetes controller that identifies unused or unhealthy resources, helping you maintain a streamlined and efficient Kubernetes cluster. It provides flexible scheduling, label filtering, Lua-based selection criteria, resource removal or update and notifications via Slack, Webex and Discord. it can also automate clusters operations.
A toolkit to run Ray applications on Kubernetes.
KubeRay is a powerful, open-source Kubernetes operator that simplifies the deployment and management of Ray applications on Kubernetes.
Cloud native batch scheduling system for compute-intensive workloads.
Volcano is a Kubernetes-native batch scheduling system, extending and enhancing the capabilities of the standard kube-scheduler. It provides a comprehensive set of features specifically designed to manage and optimize various batch and elastic workloads, including Artificial Intelligence (AI) / machine learning (ML) / deep learning (DL), bioinformatics / genomics, and other "Big Data" applications.
Universal Sandbox Infrastructure for AI Applications.
Securely run commands, filesystems, code interpreters, browsers, and developer tools in isolated runtime environments.
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
Convert Ingress resources to Gateway API resources.
Ingress2gateway helps translate Ingress and provider-specific resources (CRDs) to Gateway API resources. Ingress2gateway is managed by the Gateway API SIG-Network subproject.
Related contents:
Kubernetes Add-on Controller. Manage and Deploy Add-ons.
Sveltos is a Kubernetes add-on controller. It makes deploying and managing Kubernetes add-ons and applications easier across multiple clusters. This works for on-prem, cloud, or multitenant setups. Sveltos Kubernetes add-on controller programmatically deploys add-ons and applications in tens of clusters. Support for ClusterAPI powered clusters, Helm charts, kustomize ,YAMLs. Sveltos has built-in support for multi-tenancy.
Related contents:
Topomatik automatically reflects your underlying infrastructure in Kubernetes node topology labels, because manually updating topology is about as fun as untangling holiday lights 🎄
Related contents:
kubectl for AI Agents. Enterprise AI agent orchestration. Manage, monitor, and scale your AI workforce.
Helm chart, that enables scheduled scaling of a target resource, intended to be add overprovisioning to an autoscaling k8s cluster.
Helm Chart for overprovisioning an autoscaling Kubernetes Cluster, based on the Cluster Proportional Autoscaler and a deployment, that's acting as a "placeholder" for overprovisioning which is inspired by Cluster Overprovisioning Helm Chart from Delivery Hero.
Related contents:
Kubernetes simplified, containerized, and democratized for rootless environments.
Single-node rootless Kubernetes cluster running in a Podman container.
Autonomous AI Agents for Infrastructure. Claude Code for infrastructure. Debug, act, and audit everything Fluid does on your infrastructure.
Fluid is a terminal agent that do work on production infrastructure like VMs/K8s cluster/etc. by making sandbox clones of the infrastructure for AI agents to work on, allowing the agents to run commands, test connections, edit files, and then generate Infra-as-code like an Ansible Playbook to be applied on production.
Kubernetes-native AI serving platform for scalable model serving.
Related contents:
The first open-source platform for automated database provisioning and management. It supports multiple database technologies and can be hosted on any Kubernetes infrastructure, in the cloud or on-premises.
OpenEverest is an open-source platform for automated database provisioning and management. It supports multiple database technologies and can be hosted on any Kubernetes infrastructure, in the cloud or on-premises.
Related contents: