Search Results for "role based access control"
Sort By:
Showing 26 open source projects for "role based access control"
View related business solutions-
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
1
Sensu Go
Simple. Scalable. Multi-cloud monitoring
...The shift from static to dynamic infrastructure requires a change in approach to monitoring, from host-based to functional role-based. Connectivity moves from remote polling to publish-subscribe, the control plane moves from point-and-click interfaces to infrastructure as code workflows and self-service developer APIs. -
2
Casbin
An authorization library that supports access control models
An authorization library that supports access control models like ACL, RBAC, ABAC for Golang, Java, C/C++, Node.js, Javascript, PHP, Laravel, Python, .NET (C#), Delphi, Rust, Ruby, Swift (Objective-C), Lua (OpenResty), Dart (Flutter) and Elixir. In Casbin, an access control model is abstracted into a CONF file based on the PERM metamodel (Policy, Effect, Request, Matchers). -
3
Harbor
An open source trusted cloud native registry project that stores
Harbor is an open-source trusted cloud native registry project that stores, signs, and scans content. Harbor extends the open-source Docker Distribution by adding the functionalities usually required by users such as security, identity and management. Having a registry closer to the build-and-run environment can improve the image transfer efficiency. Harbor supports replication of images between registries, and also offers advanced security features such as user management, access control... -
4
Octelium
A next-gen FOSS self-hosted unified zero trust secure access platform
...It supports both client-based (e.g., WireGuard/QUIC tunnels) and client-less access models, which makes it flexible for both human users and automated workloads. The project also highlights self-hosted, no hidden “server-side” locked components, giving organizations greater ownership and control over access, rather than relying on proprietary SaaS. -
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
5
kube2iam
Provides different AWS IAM roles for pods running on Kubernetes
...The problem is that in a multi-tenanted containers based world, multiple containers will be sharing the underlying nodes. Given containers will share the same underlying nodes, providing access to AWS resources via IAM roles would mean that one needs to create an IAM role which is a union of all IAM roles. This is not acceptable from a security perspective. -
6
Godo
DigitalOcean Go API client
Godo is a Go client library for accessing the DigitalOcean V2 API. Create a new DigitalOcean client, then use the exposed services to access different parts of the DigitalOcean API. Currently, Personal Access Token (PAT) is the only method of authenticating with the API. You can manage your tokens at the DigitalOcean Control Panel Applications Page. If you need to provide a context.Context to your new client, you should use godo.NewClient to manually construct a client instead. ... -
7
Trivy Operator
Kubernetes-native security toolkit
The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernetes API. The Operator does this by watching Kubernetes for state changes and automatically triggering security scans in response. For example, a vulnerability scan is initiated when a new Pod is created. This way, users can find and view the risks that relate to... -
8
Tyk API Gateway
Open Source API Gateway written in Go
Tyk is an open source Enterprise API Gateway, supporting REST, GraphQL, TCP and gRPC protocols. Tyk Gateway is provided ‘Batteries-included’, with no feature lockout. Enabling your organization to control who accesses your APIs, when they access, and how they access it. Tyk Technologies uses the same API Gateway for all it’s applications. Protecting, securing, and processing APIs for thousands of organizations and businesses around the world. Ideal for Open Banking, building software... -
9
Bifrost
Middleware for production-oriented MySQL
Heterogeneous middleware for production-oriented MySQL, MariaDB, kafka synchronization to Redis, MongoDB, ClickHouse and other services. And this Bifrost can synchronize the full amount of data to multiple targets in real time. Support MySQL, MariaDB all storage types. Interface-based dynamic and flexible configuration of different data tables and target libraries. Multiple data sources, multiple target library support. Both incremental and full data synchronization are supported. One Binlog parsing thread, multiple target libraries are synchronized in parallel. Automatically restore configuration after restarting after downtime, accurate control of location. ... -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
10
Claude Platform CLI
The CLI for the Claude API
Claude Platform CLI is a command-line tool that lets users interact directly with the Anthropic Claude API from their terminal. It provides access to API resources through structured subcommands, making it useful for both interactive exploration and automated workflows. The CLI simplifies API requests by supporting typed flags, piped YAML or JSON input, and inline file references instead of manually writing complex JSON. Users can format, filter, and transform responses directly in the... -
11
Daptin
Daptin - Backend As A Service - GraphQL/JSON-API Headless CMS
Take the API overhead out of your brain with Daptin. Complete granular access to your data over the network. A single binary to power up your application. Database-backed persistence, 3NF normalized tables. JSON API/GraphQL for CRUD apis. User and group management and access control. Social login with OAuth: tested with google, github, LinkedIn. Actions for abstracting out business flows. Extensive state tracking APIs. Enable Data Auditing from a single toggle. Synchronous Data Exchange with... -
12
Go Micro
A framework for distributed systems development
...Auth is built in as a first class citizen. Authentication and authorization enable secure zero trust networking by providing every service an identity and certificates. This additionally includes rule based access control. Load and hot reload dynamic config from anywhere. The config interface provides a way to load application level config from any source such as env vars, file, etcd. You can merge the sources and even define fallbacks. A simple data store interface to read, write and delete records. It includes support for memory, file and CockroachDB by default. -
13
Capslock
Tool to remap Caps Lock key behavior on Windows systems
...Rather than detecting vulnerabilities, Capslock focuses on identifying capabilities — permissions implied by calls to sensitive or privileged standard library functions, such as file system access, networking, or process control. By following transitive call graphs, it classifies which security-sensitive operations each package can reach, giving developers visibility into what their dependencies are capable of doing. This helps apply the Principle of Least Privilege to Go software, guiding audits, supply chain reviews, and trust assessments. ... -
14
GoDoxy
High-performance reverse proxy and container orchestrator
GoDoxy is a high-performance reverse proxy and container orchestrator tailored for self-hosting environments, blending automated routing with a user-friendly web interface and advanced traffic control. Written in Go, it automatically discovers services (like Docker containers) and generates routes based on configuration or container labels, letting you expose and secure apps with minimal manual routing. GoDoxy includes features like ACL control, automatic SSL certificate management with... -
15
Convox Rack
Private PaaS built on native AWS services for maximum privacy
Convox Rack is a private PaaS that runs inside a user’s AWS account and provides a managed application deployment layer over cloud infrastructure. It is designed for teams that want the productivity of a platform-as-a-service while keeping workloads, data, and infrastructure under their own control. Developers interact with Rack through the Convox CLI to create apps, set environment variables, deploy code, build releases, and promote updates. The platform handles application lifecycle tasks... -
16
Kubernetes Dashboard
General-purpose web UI for Kubernetes clusters
Kubernetes Dashboard is a general purpose, web-based UI for Kubernetes clusters. It allows users to manage applications running in the cluster and troubleshoot them, as well as manage the cluster itself. To access Dashboard from your local workstation you must create a secure channel to your Kubernetes cluster. Kubeconfig Authentication method does not support external identity providers or certificate-based authentication. -
17
Micro Cloud
A distributed OS built for the Cloud
Micro addresses the key requirements for building services in the cloud. It leverages the microservices architecture pattern and provides a set of services which act as the building blocks of a platform. Micro deals with the complexity of distributed systems and provides simpler programmable abstractions to build on. Micro is the all encompassing end to end platform experience from source to running and beyond built with a developer first focus. Micro’s goal is to abstract away the... -
18
Keptn
Cloud-native application life-cycle orchestration
Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications. Keptn is an event-based control plane for continuous delivery and automated operations for cloud-native applications. -
19
Open Service Mesh
Cloud native service mesh to uniformly manage environments
...The OSM project builds on the ideas and implementations of many cloud-native ecosystem projects including Linkerd, Istio, Consul, Envoy, Kuma, Helm, and the SMI specification. OSM runs an Envoy based control plane on Kubernetes, can be configured with SMI APIs, and works by injecting an Envoy proxy as a sidecar container next to each instance of your application. The proxy contains and executes rules around access control policies, implements routing configuration, and captures metrics. The control plane continually configures proxies to ensure policies and routing rules are up to date and ensures proxies are healthy. -
20
Sentinel Golang
Sentinel Go enables reliability and resiliency for Go microservices
As distributed systems become increasingly popular, the reliability between services is becoming more important than ever before. Sentinel takes "flow" as the breakthrough point and works on multiple fields including flow control, circuit breaking and system adaptive protection, to guarantee the reliability and resiliency of microservices. Rich applicable scenarios: Sentinel has been wildly used in Alibaba, and has covered almost all the core-scenarios in Double-11 (11.11) Shopping Festivals... -
21
Space Cloud
Open source Firebase + Heroku to develop, scale and secure apps
...Upload/download files to scalable file stores (e.g., Amazon S3, Google Cloud Storage). Unified APIs for your custom HTTP services. Trigger webhooks or serverless functions on database or file storage events. Dynamic access control that integrates with your auth system (e.g., auth0, firebase-auth). Written in Golang, it follows cloud-native practices and scales horizontally. -
22
Manba
HTTP API Gateway
Manba is a restful API gateway based on HTTP, which can be used as a unified API access layer. Please make sure your Go version is 1.10 or above. Otherwise, undefined "math/rand". Shuffle error will occur when compiling. Traffic Control (on Server or API). Circuit Breaker (on Server or API). Load balance, service discovery, plugin. Routing (Divert Traffic, Duplicate Traffic). -
23
Gitkube
Build and deploy docker images to Kubernetes using git push
...After a simple initial setup, users can simply keep git push-ing their repos to build and deploy to Kubernetes automatically. Ideal for development where you can push your WIP branch to the cluster to test. Reference implementation for writing git-based automation on your server. Fork this repo and create your own CRD + controller + git remote hook that can do things on the Kubernetes cluster. No dependencies except native tooling (git, kubectl). Plug and play installation. Simple public key-based authentication. RBAC ready - Control access to git remotes using RBAC. Support for namespace-based multi-tenancy - Remotes can only deploy to their own namespace. ... -
24
Goku
A powerful HTTP API gateway in pure golang
Goku API Gateway is a Golang-based microservice gateway that enables high-performance dynamic routing, service orchestration, multi-tenancy management, API access control, etc. It's also suitable for API management under a micro-service system. Goku provides a graphic interface and plug-in system to make configuration easier and expand more conveniently. Goku API Gateway is a microservice gateway that runs on the boundaries of enterprise system services. -
25
goRBAC
goRBAC provides a lightweight role-based access control (RBAC) in Go
goRBAC provides a lightweight role-based access control implementation in Golang. Currently, goRBAC has two released versions. Version 1 is the original design which will only be mantained to fix bugs. Version 2 is the new design which will only be mantained to fix bugs. Although you can adjust the RBAC instance anytime and it's absolutely safe, the library is designed for use with two phases, preparing and checking.
