Search Results for "user"
Sort By:
Showing 25 open source projects for "user"
View related business solutions-
Stop Cyber Threats with VM-Series Next-Gen Firewall on AzureGain integrated visibility across all traffic in a single pass. Deploy Palo Alto Networks VM-Series to determine application identity and content while automating security policy updates via rich APIs.
-
Earn up to 16% annual interest with Nexo.Generate interest, access liquidity without selling, and execute trades seamlessly. All in one platform. Geographic restrictions, eligibility, and terms apply.
-
1
Harbor
An open source trusted cloud native registry project that stores
...Having a registry closer to the build-and-run environment can improve the image transfer efficiency. Harbor supports replication of images between registries, and also offers advanced security features such as user management, access control and activity auditing. Harbor is hosted by the Cloud Native Computing Foundation (CNCF). If you are an organization that wants to help shape the evolution of cloud native technologies, consider joining the CNCF. Cloud native registry: With support for both container images and Helm charts, Harbor serves as registry for cloud native environments like container runtimes and orchestration platforms. -
2
gVisor
Application Kernel for Containers
gVisor is an application kernel developed by Google that provides a strong layer of isolation between applications and the host operating system. Written in Go, it implements a Linux-compatible system call interface that runs entirely in user space, creating a secure sandboxed environment for containers. Unlike traditional virtual machines or lightweight syscall filters, gVisor follows a third approach that offers many of the security benefits of virtualization while maintaining the speed, resource efficiency, and flexibility of containers. Its key runtime, runsc, integrates seamlessly with container ecosystems such as Docker and Kubernetes, making it easy to deploy sandboxed workloads using familiar tools. ... -
3
Rancher
Complete container management platform
From datacenter to cloud to edge, Rancher lets you deliver Kubernetes-as-a-Service. Rancher is a complete software stack for teams adopting containers. It addresses the operational and security challenges of managing multiple Kubernetes clusters, while providing DevOps teams with integrated tools for running containerized workloads. From datacenter to cloud to edge, Rancher's open source software lets you run Kubernetes everywhere. You don’t need to figure Kubernetes out all on your own.... -
4
kcp Kubernetes
Kubernetes-like control planes for form-factors
...The goal is to be useful to cloud providers as well as enterprise IT departments offering APIs within their company. kcp takes full advantage of Kubernetes API conventions, the glue that binds the cloud-native technology ecosystem together and imbues Kubernetes popular end-user experience, but kcp has unbound it from Kubernetes workload orchestration and clusters. kcp implements fully-isolated workspaces, each acting as its own Kubernetes-like cluster, with its own URL, its own set of APIs (e.g. different CRDs), its own RBAC, but as cheap and quick as a namespace. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
MetalLB
A network load-balancer implementation for Kubernetes
...If you’re not running on a supported IaaS platform (GCP, AWS, Azure…), LoadBalancers will remain in the “pending” state indefinitely when created. Bare-metal cluster operators are left with two lesser tools to bring user traffic into their clusters, “NodePort” and “externalIPs” services. Both of these options have significant downsides for production use, which makes bare-metal clusters second-class citizens in the Kubernetes ecosystem. MetalLB aims to redress this imbalance by offering a network load balancer implementation that integrates with standard network equipment. -
6
Envoy Gateway
Manages Envoy Proxy as a Standalone or Kubernetes-based Gateway
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Based on Gateway API, with reasonable default settings to simplify the Envoy user experience, without knowing details of Envoy proxy. Automatically Envoy infrastructure provisioning and management. Support for heterogeneous environments. Initially, Kubernetes will receive the most focus. Vendors will have the ability to provide value-added products built on the Envoy Gateway foundation. Supports a variety of Security features, such as TLS, TLS pass-through, secure gRPC, authentication. rate-limiting, etc. ... -
7
Apache APISIX for Kubernetes
APISIX Ingress Controller for Kubernetes
Apache APISIX provides rich traffic management features like Load Balancing, Dynamic Upstream, Canary Release, Circuit Breaking, Authentication, Observability, etc. Apache APISIX provides open source API Gateway to help you manage microservices, delivering the ultimate performance, security, and scalable platform for all your APIs and microservices. Apache APISIX is the first open-source API Gateway that includes a built-in low-code Dashboard, which offers a powerful and flexible UI for... -
8
GoDoxy
High-performance reverse proxy and container orchestrator
GoDoxy is a high-performance reverse proxy and container orchestrator tailored for self-hosting environments, blending automated routing with a user-friendly web interface and advanced traffic control. Written in Go, it automatically discovers services (like Docker containers) and generates routes based on configuration or container labels, letting you expose and secure apps with minimal manual routing. GoDoxy includes features like ACL control, automatic SSL certificate management with Let’s Encrypt, support for HTTP, TCP/UDP forwarding, and integration points for OpenID Connect authentication and forward auth, making it highly versatile for modern home labs and self-hosted stacks. ... -
9
OpenYurt
Extending your native Kubernetes to edge(project under CNCF)
OpenYurt is built based on upstream Kubernetes and is now hosted by the Cloud Native Computing Foundation(CNCF) as a Sandbox Level Project. OpenYurt has been designed to meet various DevOps requirements against typical edge infrastructures. It provides a consistent user experience for managing the edge applications as if they were running in the cloud infrastructure. It addresses specific challenges for cloud-edge orchestration in Kubernetes such as unreliable or disconnected cloud-edge networking, edge autonomy, edge device management, region-aware deployment, and so on. OpenYurt preserves intact Kubernetes API compatibility, is vendor agnostic, and more importantly, is SIMPLE to use. ... -
Stop vibe-debugging.AppSignal's MCP server hands Claude, Cursor, or Zed your real errors, traces, and the deploy that shipped them. AI writes the fix; you review the diff.
-
10
KubeLinter
KubeLinter is a static analysis tool that checks Kubernetes YAML files
...This is to help teams check early and often for security misconfigurations and DevOps best practices. Some common examples of these include running containers as a non-root user, enforcing least privilege, and storing sensitive information only in secrets. KubeLinter is configurable, so you can enable and disable checks, as well as create your own custom checks, depending on the policies you want to follow within your organization. When a lint check fails, KubeLinter reports recommendations for how to resolve any potential issues and returns a non-zero exit code. -
11
cozystack
PaaS and framework that replace or compete with AWS, VMware
Open Source AI-ready PaaS and framework for building your own cloud on bare metal and running managed Kubernetes, virtual machines, Databases-as-a-Service or for creating your own AWS/GCP/Azure competitor for ISP/MSP/hosting providers. CNCF Project - Control your data - Cut dependence from the tech giants - Enable digital sovereignty - Use modern tools and APIs with any server - Fully utilize GPU resources for AI Who is it for? Banks and fintechs, AI-driven companies, service... -
12
KubePug
Kubernetes PreUpGrade
KubePug/Deprecations is intended to be a kubectl plugin, which Downloads a generated data.json file containing API deprecation information for a specified release of Kubernetes. Scans a running Kubernetes cluster to determine if any objects will be affected by depreciation. Displays affected objects to the user. -
13
TKEStack
Native Kubernetes container management platform
TKEStack is an open source project that provides a container management platform built for organizations that deploy containers in production. TKEStack makes it easy to run Kubernetes everywhere, meet IT requirements, and empower DevOps teams. Provides an intuitive UI interface to support visualization and YAML import and other resource creation and editing methods, enabling users to run containers without learning all Kubernetes concepts up-front. An abstract project-level resource... -
14
audit2rbac
Autogenerate RBAC policies based on Kubernetes audit logs
audit2rbac takes a Kubernetes audit log and username as input, and generates RBAC role and binding objects that cover all the API requests made by that user. -
15
rakkess
kubectl plugin to show an access matrix for k8s server resources
...For single resources, you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview. This is what rakkess is for. It lists access rights for the current user and all server resources, similar to Kubectl auth can-i --list. It is also useful to find out who may interact with some server resources. -
16
kube-fledged
Kubernetes operator to create and manage cache of container images
kube-fledged is a kubernetes operator for creating and managing a cache of container images directly on the worker nodes of a Kubernetes cluster. It allows a user to define a list of images and onto which worker nodes those images should be cached (i.e. pulled). As a result, application pods start almost instantly, since the images need not be pulled from the registry. kube-fledged provides CRUD APIs to manage the lifecycle of the image cache, and supports several configurable parameters to customize the functioning as per one's needs. -
17
Singularity
Open source container platform designed to be simple, fast, and secure
Singularity is an open-source container platform designed to be simple, fast, and secure. Many container platforms are available, but Singularity is designed for ease of use on shared systems and in high-performance computing (HPC) environments. -
18
kiam
Integrate AWS IAM with Kubernetes
kiam runs as an agent on each node in your Kubernetes cluster and allows cluster users to associate IAM roles with Pods. [a] role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumed by anyone who needs it. Also, a role does not have any credentials (password or access keys) associated with it. Instead, if a user is assigned to a role, access keys are created dynamically and provided to the user. -
19
kubernetes-event-exporter
Export Kubernetes events to multiple destinations with routing
This tool allows exporting the often missed Kubernetes events to various outputs so that they can be used for observability or alerting purposes. You won't believe what you are missing. Configuration is done via a YAML file, when run in Kubernetes, ConfigMap. The tool watches all the events and the user has to option to filter out some events, according to their properties. Critical events can be routed to alerting tools such as Opsgenie, or all events can be dumped to an Elasticsearch instance. You can use namespaces, and labels on the related object to route some Pod-related events to owners via Slack. The final routing is a tree which allows flexibility. -
20
Golang API Starter Kit
Go Server/API boilerplate using best practices DDD CQRS ES gRPC
...Allowing to work with an environment reflecting production one, allowing to reduce any misconfiguration. This is a mono-repository of many services such as authentication or user domain. Each service has it own code base with the exception of shared packages to simplify things for this boilerplate. Services communicate with each other using gRPC. Each service might expose HTTP API for external communication or/and gRPC. This project setup should reduce the time spent on environment configuration for the whole Kubernetes cluster and/or each microservice. ... -
21
CRFS
CRFS: Container Registry Filesystem
CRFS is a user-space filesystem that mounts container images directly from remote registries, exposing them as ordinary directories without a full “pull” step. Instead of downloading entire layers upfront, it fetches file ranges on demand and maintains a content-addressed cache, yielding fast startup and lower bandwidth for large images. The system speaks registry protocols and understands layered image formats, resolving whiteouts and overlays so the mounted view matches what a container runtime would see. ... -
22
Kubectl-debug
Out-of-tree solution for troubleshooting running pods
kubectl-debug is an out-of-tree solution for troubleshooting running pods, which allows you to run a new container in running pods for debugging purposes (examples). The new container will join the pid, network, user and IPC namespaces of the target container, so you can use arbitrary trouble-shooting tools without pre-installing them in your production container image. -
23
kube-lego
Automatically request certificates for Kubernetes Ingress resources
kube-lego automatically requests certificates for Kubernetes Ingress resources from Let's Encrypt. -
24
Kubicorn
Simple, cloud native infrastructure for Kubernetes
...Kubicorn will be going through a breaking API change as we adopt the upstream cluster API. kubicorn is a free and open source project that solves the Kubernetes infrastructure problem and gives users a rich Golang library to work with infrastructure. unicorn is a project that helps a user manage cloud infrastructure for Kubernetes. With kubicorn a user can declaratively create new clusters, and modify and scale them. -
25
Novm
Experimental KVM-based VMM for containers, written in Go
novm is an experimental, minimalist virtual machine monitor that explores running Linux guests with a streamlined user-space control plane. Its goal is fast, scriptable VM lifecycle management—boot, snapshot, pause, resume—without the heft of a full cloud stack. The design favors small, understandable code paths around KVM and tap networking so developers can reason about isolation and performance trade-offs. It showcases patterns like process-per-VM supervision, concise configuration, and direct mapping of devices needed for common development workloads. ...
- Previous
- You're on page 1
- Next
