kubernetes
Nelm is a Helm 3 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes.
Flexible and scalable Kubernetes multi-cluster management solution. The limitless expansion of Kubernetes. Make Kubernetes without boundaries
Kosmos is an open-source, all-in-one distributed cloud-native solution. The name "kosmos" combines 'k' representing Kubernetes and 'cosmos' which means universe in Greek, symbolizing the limitless expansion of Kubernetes. Currently, Kosmos primarily consists of three major modules: ClusterLink, ClusterTree and Scheduler. Additionally, Kosmos is equipped with a tool called kosmosctl, which allows for quick deployment of Kosmos components, adding clusters, and testing network connectivity.
A vulnerability scanner for container images and filesystems.
Backup and migrate Kubernetes resources and persistent volumes.
Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.
Related contents:
Find the documentation for all Kubernetes resources, properties, types, and examples.
Suppress vulnerabilities applying Kubernetes context to scans.
Vex8s generates VEX documents by correlating container vulnerabilities with Kubernetes settings to determine which CVEs are actually exploitable in your cluster.
bare metal load-balancer for Kubernetes. MetalLB is a load-balancer implementation for bare metal Kubernetes clusters, using standard routing protocols.
Deploy Cloud Native Applications inside Confidential Enclaves Protect containers while they are running using confidential computing and hardware-backed isolation.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
Related contents:
🪁 A modern, lightweight Kubernetes dashboard.
Kite is a lightweight, modern Kubernetes dashboard that provides an intuitive interface for managing and monitoring your Kubernetes clusters. It offers real-time metrics, comprehensive resource management, multi-cluster support, and a beautiful user experience.
Kubernetes logging dashboard.
Kubetail is a real-time logging dashboard for Kubernetes.
Kubernetes Progressive Delivery Controller.
Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities such as blue-green, canary, canary analysis, experimentation, and progressive delivery features to Kubernetes.
Ingress NGINX Controller for Kubernetes.
ingress-nginx is an Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer.
Related contents:
- Ingress NGINX Retirement: What You Need to Know @ Kubernetes Contributors.
- Migration assistance from Ingress NGINX to HAProxy Kubernetes Ingress Controller @ HAProxy.
- Another open source project dies of neglect, leaving thousands scrambling @ The Register.
- Navigating the ingress-nginx archival: why now is the time to move to Cilium @ CNCF.
- Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know @ kubernetes.
ORAS works similarly to docker. It allows you to push (upload) and pull (download) things to and from an OCI Registry, and also handles login (authentication) and token flow (authorization). What ORAS does differently is shift the focus from container images to other types of artifacts.
Related contents:
Advanced Kubernetes Architecture Security Tool
This tool allows to perform the reconstruction of complex attack paths by graph generation in a Kubernetes cluster. It uses Neo4j for the storage of objects and relationships in database as well as neodash for visualization. The language Cypher as MySQL allows queries to the database to retrieve graphs. It can be used by security auditors to quickly identify attack paths or security experts to monitor theses paths.
Open-Source Kubernetes Desktop Client Built in Rust. The Kubernetes control room for engineers and AI agents.
Investigate, analyse, and take safe action across Kubernetes clusters from one local-first desktop workspace, built with a pure-Rust core. Backend capabilities are also available to AI agents through MCP.
Kubero is a PaaS for Kubernetes. A free and self-hosted PaaS alternative to Netlify / Coolify / Vercel / Dokku / Portainer running on Kubernetes. Deploy 12-Factor Apps on Kubernetes Easily - Simple, Scalable, Cloud-Native.
Kubero [pronounced: Kube Hero] is a self-hosted PaaS (Platform as a Service) that allows any developer to deploy their application on Kubernetes without specialized knowledge. Kubero follows the principles of 12-factor apps. It is possible to run apps based on existing containers or from source code.
A more powerful alternative to kubectx and kubens.
kubie is an alternative to kubectx, kubens and the k on prompt modification script. It offers context switching, namespace switching and prompt modification in a way that makes each shell independent from others. It also has support for split configuration files, meaning it can load Kubernetes contexts from multiple files. You can configure the paths where kubie will look for contexts, see the settings section.
Related contents:
The missing open-source Kubernetes UI.
Topology, events, Helm, GitOps, image inspection, audits, and MCP for AI agents - all in one open-source Kubernetes UI. Run it locally as a single binary or self-host in your cluster.
Cloud native networking and network security.
Calico is a single platform for networking, network security, and observability for any Kubernetes distribution in the cloud, on-premises, or at the edge. Whether you're just starting with Kubernetes or operating at scale, Calico's open source, enterprise, and cloud editions provide the networking, security, and observability you need.
Related contents:
- Kubernetes Is Powerful, But Not Secure (at least not by default) @ Tigera.
- What’s New in Calico v3.31: eBPF, NFTables, and More @ Tigera.
- An In-Depth Look at Istio Ambient Mode with Calico @ Tigera.
- Save the Address, Save the Cloud: A Hands-on KubeVirt Live Migration Workshop @ Tigera.
- Mon homelab, ou comment j'essaie de rester dans la game @ Cyril Beaufrere's LinkedIn :fr:.
A toolkit to run Ray applications on Kubernetes.
KubeRay is a powerful, open-source Kubernetes operator that simplifies the deployment and management of Ray applications on Kubernetes.
A Kubernetes controller and tool for one-way encrypted Secrets.
Problem: "I can manage all my K8s config in git, except Secrets." Solution: Encrypt your Secret into a SealedSecret, which is safe to store - even inside a public repository. The SealedSecret can be decrypted only by the controller running in the target cluster and nobody else (not even the original author) is able to obtain the original Secret from the SealedSecret.
Related contents:
eks-node-viewer is a tool for visualizing dynamic node usage within a cluster. It was originally developed as an internal tool at AWS for demonstrating consolidation with Karpenter. It displays the scheduled pod resource requests vs the allocatable capacity on the node. It does not look at the actual pod resource usage.
Fix Inventory is an open-source cloud asset inventory tool for infrastructure and security engineers.
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
Fix Inventory enables a broad set of exploration and automation scenarios. Its foundation is a graph-based data model, which exposes resource metadata and dependency relationships between your service's assets.
A powerful CLI allows you to search, explore, and manage your cloud resources.
Related contents:
Get your resource requests "Just Right".
Goldilocks is a utility that can help you identify a starting point for resource requests and limits.
By using the kubernetes vertical-pod-autoscaler in recommendation mode, we can see a suggestion for resource requests on each of our apps. This tool creates a VPA for each workload in a namespace and then queries them for information.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
Related contents:
Zero-ops Kubernetes for developers, edge and IoT. Zero-ops, pure-upstream, HA Kubernetes, from developer workstations to production.
MicroK8s is a small, fast, single-package Kubernetes for datacenters and the edge.
Related contents:
Monitor cross-zone network traffic in Kubernetes.
KUBErnetes cross-ZONe NETwork monitoring with Prometheus for Cilium-based clusters (in Legacy host routing mode).
Related contents:
Homogeneous Kubernetes clusters at scale on any infrastructure using hosted control planes. A Managed Kubernetes Service Done Right. Deliver fully-managed clusters at scale everywhere with your own Gardener installation.
Gardener implements the automated management and operation of Kubernetes clusters as a service and provides a fully validated extensibility framework that can be adjusted to any programmatic cloud or infrastructure provider.
The easiest way to distribute enterprise software.
🧊 The next generation Package Manager for Kubernetes 📦 Featuring a GUI and a CLI. Glasskube packages are dependency aware, GitOps ready and can get automatic updates via a central public package repository.
Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning. Kubescape scans K8s clusters, YAML files, and HELM charts, detecting misconfigurations according to multiple frameworks (such as the NSA-CISA, MITRE ATT&CK®), software vulnerabilities, and RBAC (role-based-access-control) violations at early stages of the CI/CD pipeline, calculates risk score instantly and shows risk trends over time.
Open Source Marketplace For Kubernetes. arkade is how developers install the latest versions of their favourite tools and Kubernetes apps. With arkade get, you'll have kubectl, kind, terraform, and jq on your machine faster than you can type apt-get install/brew update.
High Performance, Kubernetes Native Object Storage. MinIO offers high-performance, S3 compatible object storage. Native to Kubernetes, MinIO is the only object storage suite available on every public cloud, every Kubernetes distribution, the private cloud and the edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
Related contents:
Lightweight Container Runtime for Kubernetes.
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface. CRI-O follows the Kubernetes release cycles with respect to its minor versions (1.x.y). Patch releases (1.x.z) for Kubernetes are not in sync with those from CRI-O, because they are scheduled for each month, whereas CRI-O provides them only if necessary. If a Kubernetes release goes End of Life, then the corresponding CRI-O version can be considered in the same way.
Related contents:
Kubevious (pronounced [kju:bvi:əs]) is a suite of app-centric assurance, validation, and introspection products for Kubernetes. It helps running modern Kubernetes applications without disasters and costly outages by continuously validating application manifests, cluster state, and configuration. Kubevious projects detect and prevent errors(typos, misconfigurations, conflicts, inconsistencies) and violations of best practices. Our secret sauce is based on the ability to validate across multiple manifests and look at the configuration from the application vantage point.
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
Your Kubernetes Platform is one Git commit away.
The DevOps Stack provides a standard Kubernetes Platform, bringing together automated Provisioning as Code, Continuous Application Deployment, and readily-made configurations for the best Cloud Native tools in the industry.
The AI-Native Kubernetes Management Platform. AI-Native Kubernetes Management at Enterprise Scale.
Plural is the control plane for platform teams. Bring AI into day-2 operations, automate complex upgrades, and manage Kubernetes fleets across any cloud, data center, or edge — fully under your control.
Convert Ingress resources to Gateway API resources.
Ingress2gateway helps translate Ingress and provider-specific resources (CRDs) to Gateway API resources. Ingress2gateway is managed by the Gateway API SIG-Network subproject.
Related contents:
The Certified Enterprise Kubernetes Distribution
k0s is a highly scalable, certified Kubernetes distribution that works on any infrastructure. It’s built on open source and free.
The package manager for Kubernetes Helm is the best way to find, share, and use software built for Kubernetes. What is Helm?
Helm helps you manage Kubernetes applications — Helm Charts helps you define, install, and upgrade even the most complex Kubernetes application.
Charts are easy to create, version, share, and publish — so start using Helm and stop the copy-and-paste madness.
KWOK stands for Kubernetes WithOut Kubelet.
KWOK is a toolkit that enables setting up a cluster of thousands of Nodes in seconds. Under the scene, all Nodes are simulated to behave like real ones, so the overall approach employs a pretty low resource footprint that you can easily play around on your laptop.
agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.
Related contents:
Cloud native certificate management. X.509 certificate management for Kubernetes and OpenShift.
cert-manager creates TLS certificates for workloads in your Kubernetes or OpenShift cluster and renews the certificates before they expire.
Related contents:
The Application Development Engine for Kubernetes Tame your developer workflow to go from Code to URL in one push.
Epinio installs into any Kubernetes cluster to bring your application from source code to deployment and allow for Developers and Operators to work better together!
Related contents:
Agent Substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.
Related contents:
CLI and validation tools for Kubelet Container Runtime Interface (CRI) . cri-tools aims to provide a series of debugging and validation tools for Kubelet CRI, which includes:
- crictl: CLI for kubelet CRI.
- critest: validation test suites for kubelet CRI.
Related contents:
Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.
Metrics Server collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler. Metrics API can also be accessed by kubectl top, making it easier to debug autoscaling pipelines.
k0rdent has been developed to provide a way to manage distributed infrastructure at massive scale, leveraging kubernetes.
k0rdent Cluster Manager is part of k0rdent which is focused on delivering a open source approach to providing an enterprise grade multi-cluster kubernetes management solution based entirely on standard open source tooling that works across private or public clouds.
Related contents:
Fearless Kubernetes App Updates. Check your Kubernetes manifests before it hits the cluster.
kubechecks allows users of Github and Gitlab to see exactly what their changes will affect on their current ArgoCD deployments, as well as automatically run various conformance test suites prior to merge.
Hajimari is a beautiful & customizable browser startpage/dashboard with Kubernetes application discovery.
The serverless database built for modern development.
Your database should be easy to use, not a source of frustration. Xata easily integrates into your developer workflow, providing the best data experience for Github, Vercel and Netlify based deployments.
Related contents:
Automate Kubernetes Configuration Editing.
kpt is a package-centric toolchain that enables a WYSIWYG configuration authoring, automation, and delivery experience, which simplifies managing Kubernetes platforms and KRM-driven infrastructure at scale by manipulating declarative Configuration as Data.
Related contents:
An open specification for enriching containers with development specific content and settings.
A Development Container (or Dev Container for short) allows you to use a container as a full-featured development environment. It can be used to run an application, to separate tools, libraries, or runtimes needed for working with a codebase, and to aid in continuous integration and testing. Dev containers can be run locally or remotely, in a private or public cloud.
Related contents:
Helm chart, that enables scheduled scaling of a target resource, intended to be add overprovisioning to an autoscaling k8s cluster.
Helm Chart for overprovisioning an autoscaling Kubernetes Cluster, based on the Cluster Proportional Autoscaler and a deployment, that's acting as a "placeholder" for overprovisioning which is inspired by Cluster Overprovisioning Helm Chart from Delivery Hero.
Related contents:
A kubectl plugin to visualize Kubernetes resources and relationships.
kubectl plugin to list allocations (cpu, memory, gpu,... X utilization, requested, limit, allocatable,...).
kubectl plugin lists allocations for resources (cpu, memory, gpu,...) as defined into the manifest of nodes and running pods. It doesn't list usage like kubectl top. It can provide result grouped by namespaces, nodes, pods and filtered by resources'name.
Kubernetes Native Policy Management.
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Related contents:
- Vos politiques de conformité sur Kubernetes avec Kyverno @ Zwindler's Reflection :fr:.
- Understanding Kyverno: Enhancing Kubernetes Security with Policy Enforcement @ Jyothi Ram's blog.
- Using the Kyverno CLI to Write Policy Test Cases @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Announcing Kyverno Release 1.15! @ CNCF.
- Optimizing Kyverno CLI performance: My LFX mentorship journey @ CNCF.
- GitOps architecture, patterns and anti-patterns @ Platform Engineering.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Automating Confidential Containers (CoCo) infrastructure with Kyverno @ CNCF.
Developer Friendly Kubernetes 👁️ .
Cyclops is an open-source dev tool that simplifies Kubernetes with an easy-to-use UI, making it less intimidating. Instead of creating and configuring your Kubernetes manifests with YAML, use Cyclops to painlessly configure and deploy your applications - validations included!