github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-13 10:21:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
877cd689a5f49df8948965ff629d2ebf04cd6d8e
awesome-kubernetes/v2-docs/kubernetes-tools.md

175 KiB
Raw Blame History

Kubernetes Plugins, Tools, Extensions and Projects

!!! info "Architectural Context" Detailed reference for Kubernetes Plugins, Tools, Extensions and Projects in the context of Architectural Foundations.

Standard Reference

AI Infrastructure

Distributed Computing

Kube-Ray

  • (2025) Kube-Ray ⭐ 2541 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — Curator Insight: An open-source Kubernetes Operator enabling the deployment and management of Ray clusters. Live Grounding: Serves as the backbone for distributed machine learning workloads on Kubernetes, abstracting compute node scaling, memory configuration, and actor scheduling.

Application Delivery

Configuration Management

Automation

  • (2022) mperezco/forklift-configmap-service [GO CONTENT] [COMMUNITY-TOOL] — A specialized service designed to dynamically orchestrate Kubernetes ConfigMap generation and delivery. It acts as a sidecar or control helper to keep configuration payloads dynamically synced across targeted deployments.

Docker Compose Migration

  • (2021) Kev ⭐ 72 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A tool to orchestrate application deployments on Kubernetes using Docker Compose files. It templatizes deployments, allowing developers to scale their compose configurations across multiple target environments with environment-specific overrides.

Secret Distribution

  • (2017) kubeops/config-syncer: Config Syncer (previously Kubed) ⭐ 1017 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Config Syncer (previously known as Kubed) is a Kubernetes operator designed to sync ConfigMaps and Secrets across multiple namespaces or cluster systems. It allows operations teams to configure central payloads with dynamic automated replication.

Templating

  • (2020) Kerbi 🌟 ⭐ 14 [RUBY CONTENT] 🌟 [COMMUNITY-TOOL] — A lightweight Ruby-based framework to generate, validate, and manage Kubernetes configurations. It allows writing clean, reusable Ruby manifests instead of raw YAML structures to simplify application templates.

GitOps

Continuous Delivery

  • (2020) PipeCD ⭐ 1290 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — PipeCD is a GitOps-style continuous delivery system supporting multi-cloud and multi-tenant environments. It coordinates deployments across Kubernetes, serverless, and cloud infrastructure with advanced strategies like canary and blue-green.

Packaging

Developer Platforms

  • (2022) acorn-io/acorn ⭐ 828 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Acorn, which evolved towards the Obot platform under its maintainers, is a container-native application deployment framework. It simplifies standard Kubernetes complexity, packaging microservices, networks, and storage into clean, self-contained runtimes.

SaaS Provisioning

Operators

Application Migration

Modernization

Enterprise Migration

  • (2020) konveyor 🌟 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [LEGACY] — An open-source application modernization platform that helps developers migrate legacy virtual machines, stateful services, and bare-metal workloads to Kubernetes. It provides discovery, analysis, and execution tools for large-scale container migrations.

Enterprise Portfolio Analysis

Architecture and Visualization

Kubernetes Visualizer

Go

  • (2021) cloudogu/k8s-diagrams ⭐ 339 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A specialized CLI utility built to parse Kubernetes live states and manifest specifications directly into clean, structured architectural diagrams. Resolves the operational pain point of manual cluster mapping, providing engineers with an accurate visual layout of active workloads, routes, and cluster components.

CICD Pipeline

GitHub Actions

Developer Tooling

  • (2021) Gama: Terminal UI for GitHub Actions ⭐ 480 [GO CONTENT] 🌟🌟 [LEGACY] — Terminal UI built to monitor and coordinate GitHub Actions workloads from the CLI. Classified as legacy under MVQ parameters because the repository has been inactive since late 2021 and was superseded by official GitHub CLI run commands.

Cloud Infrastructure

AWS

Container Registries

  • (2020) ecrcp [GO CONTENT] [COMMUNITY-TOOL] — A lightweight utility designed to copy Docker images directly between different Amazon ECR registries without requiring local download-and-reupload bandwidth. Useful for cross-account deployments and regional migration tasks in complex enterprise AWS landing zones.

Amazon EKS

ACK

  • (2026) ==AWS Controllers for Kubernetes (ACK) 🌟== ⭐ 2627 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Official community hub for AWS Controllers for Kubernetes (ACK). It allows cloud platform engineers to define and manage AWS resources (like RDS databases, S3 buckets, and SQS queues) directly through standard Kubernetes manifests and controllers.

Spot Instances

  • (2026) ==aws/aws-node-termination-handler 🌟== ⭐ 1757 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — High-efficiency agent ensuring EKS pod rescheduling during abrupt EC2 instance maintenance events, Spot interruptions, or ASG rebalance recommendations. Gracefully drains affected nodes, maintaining overall cluster operational reliability.

Infrastructure as Code

Schema Generation

  • (2026) TerraSchema: Generate JSON Schema from Terraform Configurations ⭐ 71 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A specialized CLI tool that parses declared Terraform configurations to generate structural JSON Schemas. Useful for running runtime validation scripts on dynamic inputs or verifying API schemas during configuration processing.

Cloud Native Networking

Service Proxy

Integration Tools

  • (2020) ekglue - Envoy/Kubernetes glue ⭐ 29 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A lightweight utility developed to bridge Envoy configuration directly with Kubernetes API endpoints. It parses Kubernetes services and endpoints to dynamically construct Envoy-compatible bootstrap configurations. While highly illustrative of early custom control plane mechanics, it has largely been superseded by native Kubernetes Gateway API and modern Envoy-based ingress controllers.

Cloud Native Platforms

Kubernetes

Multi-Arch Telemetry

  • (2025) ==Cluster Monitoring stack for ARM / X86-64 platforms== ⭐ 754 [JSONNET CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A specialized telemetry suite crafted for physical, edge, and multi-architecture Kubernetes clusters running on ARM or x86 systems. Extends modern operators to resource-constrained environments.

Cloud Native Security

Infrastructure Security

Admission Control

  • (2021) ==Guard== ⭐ 620 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Guard (by Appscode) is an advanced authentication and authorization engine built for Kubernetes, allowing secure webhook integrations with identity providers. Useful for scaling zero-trust validation within multi-tenant clusters.

Cluster Management

GUI Tools

Desktop Clients

  • (2024) FreeLens ⭐ 5146 [JAVASCRIPT CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — FreeLens is a lightweight, open-source alternative desktop client for managing Kubernetes clusters. It provides platform operators with real-time visual telemetry and container log streams, optimizing daily operational tasks without complex terminal overhead.
  • (2025) Kubeterm: Graphical Management Tool for Kubernetes ⭐ 211 [TYPESCRIPT CONTENT] 🌟🌟 [COMMUNITY-TOOL] — An open-source desktop client designed to simplify Kubernetes administration and performance monitoring. By rendering graphical resource mappings, it significantly lowers the cognitive load required to debug deployments, services, and complex namespaces.

Configuration

CDK and DSLs

CDK8s

  • (2026) ==cdk8s== ⭐ 4822 [TYPESCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The GitHub repository containing the core source code for CDK8s. It allows developers to model Kubernetes resources as structured code in TypeScript, Python, Java, or Go. It features full support for custom-generated CRDs, letting platform teams build clean, reusable configuration libraries.

Container Orchestration

Kubernetes (1)

EKS

  • (2026) ==realvz/awesome-eks: A curated list of awesome tools for Amazon EKS 🌟== ⭐ 340 [N/A CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A community-curated list of tools, security extensions, and configuration practices designed for Amazon EKS operators. It serves as a practical, hands-on repository for tuning ingress resources, Karpenter autoscaling, and CloudWatch agent integrations. Essential for SRE teams maintaining production-grade Kubernetes workloads on AWS.

Containers

Developer Tooling (1)

Cloud Emulation

  • (2024) ==Floci - An AWS Local Emulator Alternative== ⭐ 14060 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An active and highly performant local alternative to localstack. Emulates AWS cloud service behavior locally using specialized lightweight container footprints.

Continuous Integration and Delivery

Cloud Native CI-CD

Tekton UI Extensions

  • (2021) tekline 🌟 ⭐ 11 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Explores Tekline, a lightweight community-driven visualization and command-line helper tool for viewing the status of Tekton Pipeline runs. Bypasses the complex dashboard setups, providing developers with instant, readable feedback on pipeline step executions and container build logs directly in terminal dashboards.

Database and Storage Management

Data Administration

UI Tools

  • (2025) ==SQL Studio: A Unified SQL Database Explorer== ⭐ 3546 [RUST CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A single-binary SQL database administrator interface written in Rust. It streamlines querying, schema inspection, and data visualization across multiple RDBMS engines (including SQLite, PostgreSQL, and MySQL) in resource-constrained containerized runtimes.

Deployment and Delivery

CICD and Delivery

Developer Productivity

  • (2025) action-tmate: Debug GitHub Actions via SSH ⭐ 3550 [SHELL CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An essential interactive troubleshooting tool that opens a secure tmate SSH session directly into active GitHub Actions runners, enabling real-time terminal diagnostics of failing pipeline runs.

DevOps

Infrastructure as Code (1)

Pulumi

  • (2026) ==Pulumi: Infrastructure as Code in Any Programming Language== ⭐ 25298 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An open-source, multi-cloud infrastructure platform that enables architects to build, deploy, and manage resources using general-purpose programming languages. Supports TypeScript, Go, Python, C#, and Java, using real language constructs like loops, functions, and standard testing libraries.

Static Analysis

Kubernetes Validation

  • (2026) github.com/yannh/kubeconform 🌟 ⭐ 3066 [GO CONTENT] 🌟🌟 [ENTERPRISE-STABLE] — A ultra-fast, modern Kubernetes manifest validator written in Go, acting as a direct replacement for kubeval. Validates resources against official OpenAPI schemas, automatically caching custom resource definitions (CRDs) in offline environments. Recognized globally as a de facto tool for GitOps CI verification.

DevOps and CICD

CICD Automation

Terraform Release Management

  • (2026) Terraform Module Releaser GitHub Action ⭐ 223 [TYPESCRIPT CONTENT] 🌟🌟 [COMMUNITY-TOOL] — An automated GitHub Action that manages release tagging, semantic version tracking, and registration publication processes for Terraform modules. Mitigates distribution overhead by auto-generating changelogs and managing tags.

Developer Experience

CLI Tools

Cluster Discovery

  • (2021) Pscheidl/kubexplorer ⭐ 61 [RUST CONTENT] 🌟 [COMMUNITY-TOOL] — A lightweight, Rust-powered kubectl plugin styled like standard directory structure tree views. It allows developers to browse native Custom Resource Definitions (CRDs) and explore system schemas directly from their terminal.

Context Switching

  • (2020) ktx 🌟 ⭐ 140 [GO CONTENT] 🌟 [LEGACY] — A context-switching helper for Kubernetes clusters, similar to kubectx. Note: This project is archived by VMware, rendering it legacy; users should migrate to active alternatives like kubectx or native kubectl context switching.

Version Management

  • (2020) asdf-kubectl ⭐ 131 [SHELL CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A community-maintained plugin for the asdf extendable version manager, designed to install and manage multiple versions of kubectl. It facilitates deterministic local environments by locking Kubernetes CLI versions per project.

Visual terminal

  • (2019) kubernetes-sigs/kui ⭐ 2899 [TYPESCRIPT CONTENT] 🌟🌟🌟 [LEGACY] — A hybrid visual/command-line tool built on Electron to interact with Kubernetes APIs. Note: This project is retired/archived by the Kubernetes-SIGs group; alternative options include active terminal tools such as k9s or Lens.

Graphical User Interfaces

Educational Content

Image Building

Go Development

  • (2018) ==Ko: Easy Go Containers 🌟== ⭐ 8450 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A fast, lightweight container image builder custom-tailored for Go applications. ko builds and publishes images without requiring a local Docker daemon, producing secure, minimal distroless-base images by default.

Learning Resources

Curated Lists

  • (2021) DevNation: 10 awesome kubernetes tools every user should know [NONE CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A DevNation tech talk presentation showcasing ten high-impact Kubernetes developer tools. It focuses on boosting local productivity, troubleshooting live clusters, and simplifying manifest creation.

Local Development

Application Deployment

  • (2022) github.com/jetpack-io/launchpad ⭐ ⭐ 417 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Launchpad is a CLI tool developed by Jetpack (now Jetify) that allows developers to run their code in Kubernetes with zero initial configuration. It builds, publishes, and deploys applications directly into target namespaces seamlessly.

FinOps and Cloud Cost

IaC FinOps

AI Optimization

  • (2024) OpenOps: No-Code FinOps Automation Platform with AI ⭐ 1035 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An open-source, no-code platform utilizing AI to identify and automate cloud cost optimizations. Connects directly with Kubernetes metrics to suggest sizing adjustments and automatically remove unused resources.

Kubernetes FinOps

Tooling

  • (2023) learnk8s/xlskubectl [JAVASCRIPT CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — An open-source spreadsheet integration that translates raw kubectl command outputs into clean cost estimation worksheets. Helps engineers understand how container limits, requests, and node sizing translate into monthly cloud charges.

Infrastructure

Autoscaling

Node Provisioning

  • (2021) ==awslabs/karpenter== ⭐ 7654 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Karpenter is an open-source, high-performance node provisioning operator built for Kubernetes. It bypasses traditional ASG-based scaling by launching right-sized EC2 instances directly in response to unschedulable pods, significantly reducing scheduling latency and resource waste.

Cluster Provisioning

Bare Metal

  • (2026) ==poseidon/typhoon== ⭐ 2044 [HCL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Typhoon is a minimalist, secure, and performant bare-metal and multi-cloud Kubernetes distribution built entirely with Terraform. It bootstraps standard, upstream CNCF-compliant Kubernetes onto Flatcar Container Linux (and historically CoreOS), providing an excellent reference model for git-driven infrastructure without vendor lock-in.

Educational Content (1)

Multi-Cloud

  • (2023) Ksctl: Cloud Agnostic Kubernetes Management tool ⭐ 269 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A cloud-agnostic cluster management command-line tool designed to easily deploy HA clusters across different hyperscalers like AWS, Azure, GCP, or Civo, and local environments such as kind, maintaining standardized bootstrap workflows.

Container Backup

Image Archiving

  • (2020) kris-nova/kaar ⭐ 152 [GO CONTENT] 🌟🌟 [EMERGING] — Created by the late Kris Nova, Kaar is a Kubernetes Application Archive format tool designed to bundle container storage and system states into self-contained physical archives. Highly experimental and historical developer asset.

Container Registries (1)

Go Library

  • (2026) ==github.com/google/go-containerregistry 🌟== ⭐ 3918 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — go-containerregistry is a powerful library and CLI suite developed by Google for interacting with OCI (Open Container Initiative) registries. It allows Go applications to pull, push, analyze, and manipulate images and manifests directly over the network without needing a running Docker daemon. It serves as the programmatic foundational backbone for many modern cloud-native deployment tools, container security scanners, and custom platform architectures.

Containerization

Runtimes

  • (2026) ==nerdctl 🌟== ⭐ 10146 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Nerdctl is a Docker-compatible CLI designed specifically for containerd, offering matching CLI experiences (e.g., nerdctl run, nerdctl compose) for non-Docker environments. It supports advanced container features like lazy pulling (e.g., eStargz/soci), rootless execution, IPFS container sharing, and encryption. It acts as a bridge for developers migrating to pure containerd-based systems.

Containers (1)

Image Management

  • (2026) ==Skopeo== ⭐ 10891 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Skopeo is an industry-standard command-line tool designed to perform operations on container images and image registries without requiring local container storage or engines. Architects leverage Skopeo to inspect remote manifest details, sign images, and sync packages directly between registries (e.g., from Docker Hub to ECR). Live Grounding confirms it as a vital utility in production CI/CD security scanning and compliance loops.

Continuous Integration

Image Building (1)

  • (2026) ==kaniko== ⭐ 15768 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kaniko is an open-source tool developed by Google to build container images from Dockerfiles inside containerized environments (like Kubernetes) without requiring a privileged Docker daemon. It executes each instruction in the Dockerfile entirely in user space, avoiding risky Docker-in-Docker (DinD) security practices. Kaniko remains a de facto standard tool for secure, isolated cloud-native CI/CD build environments.

Control Plane

etcd Management

  • (2018) github.com/kubernetes-sigs/etcdadm ⭐ ⭐ 747 [GO CONTENT] 🌟🌟🌟 [LEGACY] — A retired cluster administration tool inspired by kubeadm, designed to provision and operate secure, HA etcd clusters. Although deprecated in the Kubernetes-retired ecosystem, it served as a foundational pattern for bootstrap orchestrators.

Platform Engineering

GitOps Platforms

  • (2021) github.com/kubefirst/kubefirst ⭐ 2049 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Kubefirst (by Konstructio) delivers an instant, fully integrated GitOps platform on Kubernetes, orchestrating cert-manager, External Secrets, Vault, Argo CD, and Terraform. It offers a standardized Git-driven operations roadmap out of the box.

Virtual Desktop Infrastructure

Edge Networking

  • (2023) kVDI ⭐ 459 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Duplicated reference of the peer-to-peer cloud-native VDI platform. It enables scalable running of interactive virtual desktops inside standard Kubernetes pods via automated remote-protocol streaming.

Infrastructure and Hardware

AIML Infrastructure

Hardware Integration

  • (2026) ==NVIDIA/k8s-device-plugin: NVIDIA device plugin for Kubernetes== ⭐ 3788 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This specialized DaemonSet exposes physical GPU properties to the local kubelet node manager. Operating as the essential link for hardware-accelerated workloads, it handles task-scheduling configurations and sets device-isolation runtimes so container systems can safely slice and access host GPU hardware.

Infrastructure and Platform

Kubernetes Tooling

CLI Utilities

  • (2022) ==kubech (kubectl change)== ⭐ 156 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — kubech (kubectl change) is a lightweight CLI utility that enables rapid, interactive switching of Kubernetes contexts and namespaces. Enhances workflow security by reducing terminal navigation steps.

Developer Experience (1)

  • (2024) ==Portfall: A desktop k8s port-forwarding portal for easy access to all your cluster UIs 🌟== ⭐ 127 [JAVASCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Portfall is a modern desktop application for managing Kubernetes port-forwarding configurations. Offers a convenient visual portal that eliminates repetitive manual CLI port-forward multiplexing during local service integrations.
  • (2023) ==Access Pod Online using Podtnl== ⭐ 65 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Podtnl is a lightweight command-line utility designed to expose services running in remote Kubernetes pods over secure HTTP tunnels. Allows engineers to easily share, demo, and test internal endpoints without complex Ingress and DNS setups.
  • (2024) The Golden Kubernetes Tooling and Helpers list [NONE CONTENT] [COMMUNITY-TOOL] — A highly granular, crowd-sourced spreadsheet tracking essential Kubernetes tools and extensions. Acts as an excellent resource for platform architects searching for specialized utilities in monitoring, cost allocation, and security governance.
  • (2023) dev.to: Top 200 Kubernetes Tools for DevOps Engineer Like You [NONE CONTENT] [COMMUNITY-TOOL] — A comprehensive directory indexing over 200 Kubernetes tools tailored for DevOps and platform engineers. Covers diverse categories including continuous deployment controllers, ingress routing, secret managers, and network policy visualizers.
  • (2023) devtron.ai: 7 Tools To Make Kubernetes Management Easy [NONE CONTENT] [COMMUNITY-TOOL] — Highlights seven robust utilities engineered to simplify Kubernetes cluster administration. Focuses on GitOps CD operations with ArgoCD, cluster visualizers, and package managers like Helm to reduce overall developer cognitive load.
  • (2023) learnk8s.io/real-time-dashboard [TYPESCRIPT CONTENT] [COMMUNITY-TOOL] — An educational workspace resource demonstrating how to build dynamic, real-time dashboards to trace Kubernetes state shifts. Details WebSocket connections, SSE streaming, and reactive rendering engines to visualize namespace status.
  • (2022) containerjournal.com: 9 Open Source Developer Tools for Kubernetes [NONE CONTENT] [COMMUNITY-TOOL] — A curated round-up of nine vital open-source developer tools for Kubernetes. Evaluates Skaffold, Telepresence, Lens, and others, emphasizing their utility in shortening development feedback loops and streamlining local cluster integrations.
  • (2022) infoworld.com: 15 tools that make Kubernetes easier [NONE CONTENT] [COMMUNITY-TOOL] — An evaluation of fifteen open-source CLI and dashboard tools designed to simplify day-to-day Kubernetes cluster operations. Analyzes lightweight management applications, manifest syntax linters, and network connectivity utilities.

FinOps and Analytics

  • (2024) ==kube-opex-analytics 🌟== ⭐ 481 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An open-source utility designed to collect and visualize resource allocation analytics across multiple clusters. Evaluates usage histories, helps calculate workload cost distributions, and identifies over-provisioned namespace configurations.

Infrastructure Optimization

Cost Management

Tooling (1)

  • (2022) KubeSurvival 🌟 ⭐ 187 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A scanning utility that audits existing clusters to determine the absolute cheapest VM instance shapes capable of hosting current workloads. Ensures high-availability parameters and compute requirements are fully met before suggesting migration profiles.

Infrastructure as Code (2)

Kubernetes Provisioning

Migration

  • (2026) pulumi/kube2pulumi ⭐ 107 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — Open-source command-line tool designed to convert static Kubernetes YAML templates or dynamically generated Helm outputs directly into isomorphic, compilable Pulumi configurations.

Kubernetes (2)

AIOps

Diagnostics

Developer Experience (2)

CLI Tools (1)

  • (2023) kubetools.io: Why K9s Should Be Your Go-To Tool for Kubernetes Management [MARKDOWN CONTENT] [COMMUNITY-TOOL] — This guide details the operational efficiency gains of adopting K9s, a terminal-based UI for interacting with Kubernetes clusters. It contrasts standard kubectl workflows with K9s' real-time, keyboard-driven navigation, logs streaming, and resource monitoring.

Container Builds

  • (2021) ==vmware-tanzu/buildkit-cli-for-kubectl (kubectl plugin)== ⭐ 505 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — A kubectl plugin designed to execute container builds directly on remote BuildKit instances inside clusters. Live grounding confirms the project has been archived under VMware, steering teams to direct BuildKit operators or Kaniko.

Tutorials

  • (2023) Kubernetes: Un tour por los comandos básicos [SPANISH CONTENT] [COMMUNITY-TOOL] — A rapid-format video tutorial introducing basic kubectl commands to junior administrators. It provides quick visual examples of resource inspection, namespace switching, and logs viewing.

Multi-Tenancy

Namespace Management

  • (2020) ==kubernetes-sigs/hierarchical-namespaces: The Hierarchical Namespace Controller (HNC)== ⭐ 667 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The Hierarchical Namespace Controller (HNC) allowed users to establish parent-child relationships between namespaces to propagate policies, secrets, and roles. Although highly influential for multi-tenant self-service models, the repository has been officially retired as of recent CNCF updates, steering teams toward newer vcluster or namespace-controller patterns.

Networking

Service Routing

  • (2021) ==kubernetes-sigs/kpng== ⭐ 240 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Originally conceived as the next-generation Kubernetes Proxy (KPNG) to split kube-proxy into a clean control plane and specialized data planes. Live grounding confirms the project has been officially retired by SIG Network, though its architectural lessons on decoupled state distribution continue to influence modern custom dataplane designs.

Node Management

Garbage Collection

  • (2022) ==github.com/Azure/eraser 🌟== ⭐ 607 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Eraser is a Kubernetes native tool designed to clean up unused, dangling, and vulnerable images from cluster nodes. Operating as an automated daemonset controller, it significantly reduces host disk utilization and minimizes the attack surface across production fleets.

Observability

Visualization

  • (2022) ==github.com/oslabs-beta/oslabs== ⭐ 65 [TYPESCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — KubernOcular is an open-source visualizer and troubleshooting tool designed to map and monitor live Kubernetes topologies. It helps operators identify bottlenecks and configuration misalignments by representing workloads and networking rules in an intuitive graphical flow.

Platform Engineering (1)

Control Planes

  • (2022) salaboy.com: Building platforms on top of Kubernetes: VCluster and Crossplane [MARKDOWN CONTENT] [COMMUNITY-TOOL] — An architectural analysis exploring how to assemble developer platforms using Crossplane for cloud resource provisioning and vcluster for lightweight, isolated virtual control planes. It underscores the modern paradigm of 'Kubernetes as a control plane' rather than just a container orchestrator.

Kubernetes and Container Orchestration

Platform Engineering (2)

AppOps and GitOps

  • (2025) ==Devtron== ⭐ 5513 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A comprehensive, open-source AppOps platform for Kubernetes designed to consolidate CI/CD pipelines, GitOps, observability, and cost optimization. Provides self-service deployment interfaces, security checks, and deep resource validation for multicluster operations.

Kubernetes and Scaling

Advanced Scaling

Predictive Scaling

  • (2024) github.com/jthomperoo: Predictive Horizontal Pod Autoscaler ⭐ 383 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — An advanced horizontal pod autoscaling extension utilizing forecasting models (such as Holt-Winters and LSTM). Anticipates traffic peaks by analyzing historical system metrics, pre-allocating server compute before traffic reaches the platform.

Local Developer Environment

Container Runtime Setup

Docker Compose

  • (2025) DockSTARTer ⭐ 2560 [SHELL CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A user-friendly CLI utility designed to simplify the configuration and installation of self-hosted server software via structured Docker Compose patterns. Serves as a solid entry point for containerization concepts in local server and edge hardware topologies.

Log Management and Diagnostics

Command Line Tools

Terminal Interfaces

  • (2020) bul: Interactive TUI for Exploring Kubernetes Container Logs ⭐ 16 [GO CONTENT] 🌟 [LEGACY] — An interactive Terminal User Interface (TUI) written in Go designed to query and stream local Kubernetes container logs. Live Grounding Note: Because development has remained inactive for years, it is considered legacy; modern engineers typically use tools like K9s or Stern in active production.

Machine Learning

Model Serving

Serverless ML

  • (2019) ==KFServing 🌟== ⭐ 5573 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — KServe (formerly KFServing) provides a highly performant, serverless machine learning inference platform on Kubernetes. It abstracts raw routing, scaling, and GPU configurations, supporting frameworks like TensorFlow, PyTorch, and ONNX.

Multi-Cluster

Service Management

Operator Framework

  • (2023) ==KubeCarrier - Service Management at Scale== ⭐ 291 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — KubeCarrier is an open-source system designed for managing services across multiple Kubernetes clusters using a Service App Store model based on CRDs. Curator insights framed it as an enterprise-ready hub for multi-tenant services; however, live grounding reveals the project has been archived by Kubermatic. It remains academically and architecturally notable for showing how to use Hub-and-Spoke cluster patterns to automate service provisioning.

Multi-Cluster Management

Hybrid Cloud

Azure Arc

Networking (1)

DNS and Ingress

Routing Controllers

  • (2024) ==borchero/switchboard: Switchboard== ⭐ 163 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Switchboard functions as a Kubernetes-native dynamic router and DNS management hub. It coordinates with global DNS service APIs to orchestrate routing policies, mapping live cluster ingress nodes automatically to external domain registrations.

Ingress and Routing

Serverless

  • (2019) Kourier ⭐ 333 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — An Envoy-based Ingress gateway specifically designed to serve as the default network layer for Knative Serving. It provides a lightweight, highly responsive routing layer to handle rapid scale-to-zero cold starts.

Observability (1)

Alert Management

Visualizers

  • (2023) ==karma 🌟== ⭐ 2648 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A highly functional and responsive dashboard for Prometheus Alertmanager alerts. Enables deep filtering and cluster aggregation across diverse Alertmanager nodes, dramatically improving SRE triage workflows.

ChatOps

Collaboration Platforms

  • (2019) botkube.io [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Botkube is a collaboration and ChatOps tool designed to integrate Kubernetes clusters directly with popular messaging channels like Slack, Discord, and Teams. It allows debugging, running kubectl commands, and monitoring cluster alerts securely from chat interfaces.

Dashboards

Developer Tooling (2)

  • (2023) ==vmware-tanzu/octant== ⭐ 6247 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Octant was an open-source, extensible developer dashboard designed to visualize local and remote Kubernetes cluster states, resource dependencies, and logs. Project development was officially archived in 2023 as developers shifted to other open-source or commercial alternatives like Lens, OpenLens, and K9s.

Debugging

CLI Extensions

  • (2021) github.com/JamesTGrant/kubectl-debug ⭐ 373 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A kubectl plugin designed to launch temporary debugging containers within a target pod namespace. Streamlines manual container introspection prior to the widespread adoption of native ephemeral containers.

Pre-flight Checks

  • (2025) github.com/replicatedhq/troubleshoot ⭐ 582 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — A framework providing preflight checks and support-bundle collection capabilities for Kubernetes applications. Crucial for enterprise environments deploying applications onto heterogeneous on-premises or customer-managed clusters.

eBPF

  • (2025) inspektor-gadget/inspektor-gadget ⭐ 2846 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An advanced eBPF-based debugging and observability framework for Kubernetes clusters. It instruments system calls, network flows, and filesystem activities directly at the kernel level without injecting sidecars, delivering low-overhead runtime inspection and security auditing.

Event Management

Notifications

  • (2016) bitnami-labs/kubewatch ⭐ 2426 [GO CONTENT] 🌟🌟🌟 [LEGACY] — A popular event-driven Kubernetes watcher that monitors cluster resources and broadcasts real-time changes directly to webhooks and team workspaces like Slack. Note: The project has been archived by VMware; users are urged to migrate to active tools like Botkube.

UI Clients

Multi-Cluster (1)

  • (2024) KubeUI: A Desktop Kubernetes Client ⭐ 311 [C# CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A high-performance, desktop-optimized UI designed to stream, monitor, and interact with live cluster metrics and objects. It enhances developer agility through dynamic views of multi-cluster namespaces and active workload metrics.

Observability and Monitoring

Runtime Security

Falco and K3s Audit Logging

  • (2021) Analyze Kubernetes Audit logs using Falco 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Demonstrates how to pipe Lightweight Kubernetes (K3s) API server audit logs directly into CNCF Falco. Perfect for resource-constrained edges and automated home lab deployments.

Operations

Deprecation Monitoring

Resource Validation

  • (2026) ==Deprek8ion== ⭐ 143 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A Rego-based validation policy suite created to audit obsolete API resources in Kubernetes templates. While historically popular for preventing runtime upgrade issues, platform engineering teams are transitioning toward active admission dynamic scanners like Pluto or Kubent in modern workflows.

Garbage Collection (1)

Resource Cleanup

Node Management (1)

Troubleshooting

Operations and Troubleshooting

Diagnostic Analysis

Windows Packet Capture

  • (2020) github.com/OvidiuBorlean/kubectl-windumps [GO CONTENT] [ADVANCED LEVEL] [LEGACY] — A legacy kubectl command-line utility facilitating TCP packet captures directly on Windows Server nodes within AKS clusters. Live grounding shows the project has been inactive for several years, yet it serves as a valuable conceptual reference for troubleshooting deep network issues.

Performance and Testing

Benchmarking

Storage Performance

  • (2021) vmware-tanzu/k-bench 🌟 ⭐ 408 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A benchmarking framework tailored specifically for assessing file and block storage performance inside Kubernetes. It runs FIO operations inside containers to analyze read/write IOPS and latency behaviors across storage classes.

Cluster Validation

Health Checking

  • (2016) aelsabbahy/goss ⭐ 5904 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Goss is an ultra-fast, YAML-based infrastructure validation and health-checking tool. Commonly utilized in Kubernetes as a minimal, lightweight container liveness/readiness probe or system validation suite.

Load Testing

Benchmarking (1)

  • (2020) kube-burner 🌟 ⭐ 773 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A specialized performance and orchestration tool designed to stress-test Kubernetes clusters. It automates object creation, monitors cluster health in real time via Prometheus, and measures scheduling latency at scale.

Observability (2)

  • (2021) ==ddosify/ddosify== ⭐ 8528 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Rebranded from Ddosify to Anteon, this is a high-performance, developer-centric network load-testing and observability platform. It allows simulating high concurrency to benchmark REST APIs, HTTP endpoints, and Kubernetes workloads.

Stress Testing

Platform Engineering (3)

Infrastructure as Code (3)

Terraform and AWS

EKS Modules
  • (2023) AWS EKS Argo CD Terraform Component [HCL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Enterprise-ready Terraform submodule designed to deploy, configure, and bootstrap Argo CD onto an existing AWS EKS cluster. Standardizes complex security configurations, integrates with IAM Roles for Service Accounts (IRSA), and provisions preconfigured Helm releases.

Kubernetes GitOps and Packaging

Alternative Deployment Engines

  • (2026) Nelm: A Helm Alternative for Kubernetes Deployments ⭐ 1083 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A high-performance deployment engine embedded in Werf that provides a drop-in, robust alternative to standard Helm tracking. It addresses Helm's native state validation limitations by offering deep, real-time resource validation and status monitoring.

Auditing and Maintenance

  • (2024) helm-changelog: Create changelogs for Helm Charts, based on git history ⭐ 43 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A smart CLI helper designed to parse git commit logs and automatically compile detailed changelogs for Helm releases. Ideal for maintaining human-readable release histories without manual maintenance bottlenecks during major release cycles.

Compliance and Validation

Helm Documentation

  • (2025) helm-docs ⭐ 1745 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An automated utility designed to generate clear Markdown documentation from Helm chart metadata and schema structures. By analyzing values.yaml schema annotations, it produces clean, standardized configuration tables. This ensures chart configurations remain self-documenting and structurally valid within CI/CD pipelines.

Helm Templates

  • (2025) HULL ⭐ 288 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — The Helm Utility Library Layer (HULL) is an innovative templating library designed to drastically reduce boilerplate code. It allows platform engineers to define Kubernetes resources declaratively within JSON/YAML schemas, minimizing redundant YAML scripting.

Kubernetes Manifests

Validation and Linting

  • (2025) ==KubeLinter== ⭐ 3469 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An enterprise-grade static analyzer for raw Kubernetes manifest files and Helm charts. Translates security benchmarks, privileged container checks, and missing resource limits into actionable DevOps signals.
  • (2024) ==github: Kubernetes JSON Schemas 🌟== ⭐ 337 [NONE CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An archive of automatically generated JSON Schemas extracted from official Kubernetes API definitions. Historically key for linting, now superseded by modern integrated IDE validation engines and CRD schemas.

Provisioning

Ansible

Advanced Infrastructure

  • (2024) ==krd== ⭐ 40 [SHELL/ANSIBLE CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The Kubernetes Reference Deployment (KRD) leverages Ansible playbooks and shell scripts to automate multi-node cluster provisioning with advanced network architectures, hardware acceleration (SR-IOV), nested VM hypervisors, and distributed storage engines.

Reliability

Testing

Performance Benchmarking

Operators (1)

Resource Management

Automation and Tools

Rightsizing Tools

  • (2024) ==github.com/FairwindsOps: Goldilocks is a utility that can help you identify' a starting point for resource requests and limits== ⭐ 3249 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Goldilocks is a highly popular utility that analyzes Vertical Pod Autoscaler (VPA) recommendations.
  • Automatically creates VPAs for workloads and visualizes ideal resource boundaries in a clean dashboard.
  • Essential for platform engineers aiming to establish baseline CPU and memory allocations.
    • (2023) ==kondense 🌟== ⭐ 368 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kondense is an open-source, lightweight auto-tuning utility for Kubernetes.
  • Runs asynchronously to analyze workload consumption and dynamically update resource definitions.
  • Aims to reduce idle node overhead with minimal configuration.

FinOps

Cluster Scale Down

  • (2021) govirtuo/kube-ns-suspender 🌟 ⭐ 84 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A cloud-cost mitigation helper designed to scale down resources in designated Kubernetes namespaces during idle hours (e.g., nights and weekends). It intercepts workload resources like Deployments and StateSets to reduce overhead.

Scheduling

Batch Workloads

HPC

  • (2018) kube-batch ⭐ 1091 [GO CONTENT] 🌟🌟 [LEGACY] — An early batch scheduler for Kubernetes designed to run high-performance computing (HPC) and deep learning workloads. Note: This project is now retired and archived; its features have been superseded by Volcano or the native Kubernetes scheduler queueing enhancements.

Multi-Cluster (2)

Batch Workloads (1)

  • (2020) Armada ⭐ 600 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A high-throughput, multi-cluster batch queuing system built on top of Kubernetes. Armada manages tens of thousands of concurrent jobs across geographically distributed clusters, optimized for machine learning and quantitative analysis.

Security

CICD Security

Identity and Access

  • (2022) tremolosecurity.com: Secure Access to Kubernetes From Your Pipeline [MARKDOWN CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A detailed technical guide on securing CI/CD pipelines when interacting with Kubernetes APIs. It showcases integrating OpenID Connect (OIDC) authentication flow into runner tasks to avoid long-lived high-privilege service account keys.

Certificate Management

Trust and Identity

  • (2021) Jetstack Secure Agent 🌟🌟 ⭐ 262 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A component of the Jetstack Secure platform that integrates with cert-manager. It aggregates TLS/SSL certificate telemetry and configuration states from clusters, allowing centralized enterprise monitoring of certificate lifetimes and trust domains.

Compliance and Policy

OPA Rego

  • (2021) armosec/regolibrary ⭐ 131 [REGO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A repository of highly structured Rego-based compliance policies curated for the Kubescape open-source platform. It maps cluster postures against frameworks like MITRE ATT&CK, NSA/CISA, and CIS benchmarks.

Configuration Secrets

CLI Decoders

  • (2026) ==kei6u/kubectl-secret-data== ⭐ 39 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A highly convenient kubectl plugin that decodes nested Secret structures instantly. By outputting plain text directly to standard output, it eliminates manual base64 decoding loops, drastically reducing troubleshooting overhead for operations teams who frequently audit cluster application states.

Identity and Access (1)

Authentication

  • (2021) identity-server ⭐ 27 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — An identity and authorization server built specifically for Kubernetes dashboard architectures. It integrates with native OpenID Connect (OIDC) providers to manage secure user sessions and token exchanges for web UIs.

LDAP Authentication

  • (2018) vbouchaud/k8s-ldap-auth ⭐ 54 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A lightweight Kubernetes webhook authentication service interfacing directly with external LDAP/Active Directory engines. It maps LDAP group memberships into Kubernetes groups for clean RBAC authorization.

RBAC

Legacy Tools
  • (2020) ==Krane 🌟== ⭐ 740 [RUBY CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Curator Insight: An open-source Kubernetes RBAC static analysis tool designed to identify risky roles, cluster roles, and broad resource access configurations. Live Grounding: The repository is archived and inactive for over 4 years. While the structural rules engine remains historically valuable, it does not support modern Kubernetes RBAC security vectors.

Reverse Proxy

  • (2022) tremolosecurity.com: Updating kube-oidc-proxy [MARKDOWN CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A step-by-step upgrade guide focusing on resolving depreciations within the kube-oidc-proxy operator ecosystem. It discusses maintaining backward compatibility, secure certificate authority upgrades, and safe user token validation transfers.

Policy and Admission Control

Runtime Security (1)

Legacy Tools (1)
  • (2018) ==box/kube-exec-controller== ⭐ 126 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Curator Insight: Controller to restrict and audit shell execution inside Kubernetes pods. Live Grounding: Inactive for over five years. Superseded by newer ephemeral container mechanics, admission controllers (OPA/Kyverno), and modern service mesh execution boundaries.

Registry Integration

Container Runtimes

  • (2026) ==k8scr 🌟== ⭐ 119 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A lightweight and specific CLI utility used to inspect and fetch container image metadata from within a Kubernetes context. It bypasses complex registry credential configurations, allowing developers and administrators to debug and analyze container layers directly.

Secrets Management

GCP Secret Manager

  • (2021) jenkins-x/gsm-controller ⭐ 25 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — An automated controller that continuously synchronizes secrets stored inside Google Secret Manager into standard Kubernetes native secret resources. Designed for Jenkins X deployments, it ensures consistent local availability of external cloud-backed credentials.

Service Mesh Security

Audit Tools

  • (2021) chen-keinan/mesh-kridik ⭐ 27 [GO CONTENT] 🌟 [COMMUNITY-TOOL] — A security auditing and compliance verification tool for cloud-native Service Meshes, validating configurations against strict benchmark rulesets. It supports meshes like Istio, Linkerd, and Consul.

Security Portals

  • (2021) kitploit.com: Mesh-Kridik [MARKDOWN CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A kitploit technical summary showcasing Mesh-Kridik. It details how the tool scans Service Mesh control plane components, detects security vulnerabilities, and exports visual report matrices to speed up mitigation.

Vulnerabilities

Hacking Labs

  • (2024) The Kubernetes Goat ⭐ 5674 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — The premier interactive security training platform containing an intentionally vulnerable Kubernetes cluster. Designed as an educational sandbox to demonstrate real-world cluster vulnerabilities, RBAC privilege escalations, metadata exposure, and container breakout exploits.

Post-Deployment Scanning

  • (2025) ==kubescape== ⭐ 11480 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An active CNCF Sandbox tool providing multi-framework configuration scanning, risk analysis, and vulnerability management. It integrates into CI/CD pipelines to ensure continuous verification of compliance frameworks (like CIS and NSA-CISA). Essential for enterprise teams seeking unified security visibility.

Vulnerability Scanning

Runtime Security (2)

  • (2022) Kubei 🌟 ⭐ 1462 [GO CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — OpenClarity (originally evolving from Kubei) is a comprehensive cloud-native security platform that scans Kubernetes clusters for vulnerabilities, secrets, and malware. It works by analyzing container images and running workloads to detect security risks in real time.

Software Engineering

Database Management

Model Context Protocol

Storage

Kubernetes Storage

Backup and Replication

  • (2026) ==VolSync 🌟== ⭐ 978 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — VolSync is an open-source Kubernetes operator developed by Backube to orchestrate cross-cluster persistent volume data replication. Supporting engines like rsync, rclone, and restic, it delivers a platform-agnostic framework for executing disaster recovery policies.

GlusterFS Orchestration

  • (2026) ==Kadalu== ⭐ 748 [PYTHON CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kadalu is a lightweight, container-native storage solution that utilizes GlusterFS to orchestrate persistent volumes inside Kubernetes. It runs storage services inside application pods as microservices, offering a lightweight alternative to external GlusterFS cluster configurations.

Workloads

Batch Jobs

Tooling (2)

  • (2020) github.com/alexellis/run-job ⭐ 211 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A developer-oriented utility written in Go to quickly trigger Kubernetes Jobs, track execution statuses, and stream execution logs directly to stdout. Simplifies local workflow testing and diagnostic debugging.

💡 Explore Related: Demos | Kubernetes | Cheatsheets

Reference in New Issue View Git Blame Copy Permalink