On this page

Kubernetes

Ivan Velichko has lots of great posts on containers & k8s. Beetle & Infra are neat.

Kube-Hetzner or Kubernetes Cluster Hetzner API Provider are nice as Hetzner has cheap servers. GKE has nicest hosted Kubernetes experience.

Acorn is useful. Authentik seems nice for authenticating the cluster.

I personally avoid Kubernetes in favor of serverless compute like Cloudflare Workers or running containers on fly-io or Cloud Run.

Notes

Kubernetes runs pods that contain 1 to n docker containers. So if you have your apps in the form of docker images you are ready to go.
The OpenShift guys like to make the analogy that Kubernetes is like Linux and that there are different distributions of it, OpenShift being one (like Red Hat).
Interacting with kubernetes feels very different and in a lot of ways it's almost an operating system for a super computer. You sort of forget how many computers and vms or whatever are out there and kubernetes handles a lot of the implementation details for you. Installing a lot of apps to the cloud is as simple as typing 'helm install jenkins' and waiting 5 minutes.
- It's just a radically new way of dealing with 'the cloud'. And the thing that makes it especially threatening to aws is that it doesn't matter where it runs. Developing an app for kubernetes on aws or google cloud or azure or anything else is almost an identical experience. People are going to become very price sensitive because that's the only thing that distinguishes one kubernetes host from another (aside from the ease of installing a kubernetes cluster -- something which aws is fairly far behind on)
In general, the right question to ask yourself when designing Pods is, “Will these containers work correctly if they land on different machines?” If the answer is “no,” a Pod is the correct grouping for the containers. If the answer is “yes,” multiple Pods is probably the correct solution.
Ingress controller watches for Ingress resources in your cluster.
Kubernetes (or whatever other container scheduler) might feel like overkill, but if all they do is force you to adopt a container-centric / 12-factor way of building your applications it was worth trying them. And once you've adopted that workflow it's a no-brainer to go from a single node to a cluster which will dynamically allocate the workloads it runs.
- Running a small container cluster at work has even changed how I setup single-host projects in my spare time: I will build everything into a container, bind-mount whatever it might need, create a simple systemd unit that just runs / rms the docker container on start and stop. Bliss.
After a couple years on kubernetes, there is a simple joy to a deployment process that looks like "scp binary server: && ssh server systemctl restart service", and takes 5s to complete.
In K8S, I think the best is hand-on experience, do it and. you will understand why a certain thing has to do that way.
Despite its reputation, Kubernetes is actually quite easy to master for simple use cases. And affordable enough for more complex ones. The fundamental abstractions are as simple as they can be, representing concepts that you'd already be familiar with in a datacenter environment. A cluster has nodes (machines), and you can run multiple pods (which is the smallest deployable unit on the cluster) on each node. A pod runs various types of workloads such as web services, daemons, jobs and recurring jobs which are made available (to the cluster) as docker/container images. You can attach various types of storage to pods, front your services with load-balancers etc. All of the nouns in the previous paragraph are available as building blocks in Kubernetes. You build your complex system declaratively from these simpler parts.
Can edit a deployment or pod via kubectl edit and update the command to be tail -f /dev/null

Links

Kubernetes The Hard Way - Bootstrap Kubernetes the hard way on Google Cloud Platform. No scripts.
What happens when I type kubectl run (HN)
Helm - Kubernetes package manager.
Kubernetes Security - Best Practice Guide
kaniko - Build Container Images In Kubernetes.
Draft - Streamlined Kubernetes Development.
Nix Kubernetes - Kubernetes deployment manager written in Nix.
Knative Serving - Kubernetes-based, scale-to-zero, request-driven compute.
Rancher Kubernetes - Complete container management platform. Makes it easy to run Kubernetes everywhere. (Code)
OpenShift - Enterprise-ready Kubernetes container platform with full-stack automated operations. (GitHub) (assisted-service)
Portainer - Lighter than Rancher (for Docker).
Kubernetes 101 (2018)
node-problem-detector - Aims to make various node problems visible to the upstream layers in cluster management stack.
go-kubectx - 5x-10x faster alternative to kubectx. Uses client-go.
Kubernetes for Sysadmins – Kelsey Hightower (2016)
Kubernetes API conventions
Kubeval - Validate your Kubernetes configuration files, supports multiple Kubernetes versions.
Let's encrypt with GKE instructions
Kubernetes for personal projects? No thanks! (2018)
Kubespy - Tools for observing Kubernetes resources in real time, powered by Pulumi.
Terraform Kubernetes provider
KubeContext - Menu Bar App for Managing Kubernetes Contexts on Mac.
Kubeapps - Web-based UI for deploying and managing applications in Kubernetes clusters.
kubefwd - Bulk port forwarding Kubernetes services for local development.
You might not need Kubernetes (2018) - HN
Kubespray - Deploy a Production Ready Kubernetes Cluster.
Argo - Container-native workflows for Kubernetes. (Getting started) (Templating) (Argo Server) (Web) (Awesome)
Kazan - Kubernetes API client for Elixir.
Maestro - Provides a declarative approach to building production-grade Kubernetes Operators covering the entire application lifecycle.
kail - Kubernetes log viewer.
Kubernetes clusters for the hobbyist
Virtual Kubelet - Open source Kubernetes kubelet implementation.
Compose on Kubernetes - Deploy applications described in Compose onto Kubernetes clusters.
kind - Kubernetes IN Docker - local clusters for testing Kubernetes.
Kubernetes Failure Stories - Compiled list of links to public failure stories related to Kubernetes. (Code) (HN)
Garden - Development engine for Kubernetes, containers and serverless functions.
Kubinception: using Kubernetes to run Kubernetes (2019)
Kubernetes Authentication Example - Code is provided verbatim as an example of how to connect to an OIDC provider and authenticate users before configuring their kubeconfig.
PowerfulSeal - Adds chaos to your Kubernetes clusters, so that you can detect problems in your systems as early as possible.
Goldpinger - Debugging tool for Kubernetes which tests and displays connectivity between nodes in the cluster.
k3s - Lightweight Kubernetes. Easy to install, half the memory, all in a binary less than 40mb.
Kubebuilder - SDK for building Kubernetes APIs using CRDs.
k9s - Provides a curses based terminal UI to interact with your Kubernetes clusters. (HN)
Knative build - Kubernetes-native Build resource.
Kubernetes as an API standard (2019)
Awesome Kubernetes
Awesome Kubernetes 2
Cerebral - Kubernetes cluster autoscaler with pluggable metrics backends and scaling engines.
Skaffold - Easy and Repeatable Kubernetes Development.
Talos - Modern Linux distribution for Kubernetes.
Kubernetes cleanup operator - Kubernetes Operator to automatically delete completed Jobs and their Pods.
Click - Command Line Interactive Controller for Kubernetes. Its purpose is to manage a large number of Kubernetes clusters/objects quickly and efficiently.
Kubectl Dashboard - Sub-command for kubectl that will instantly make a Kubernetes dashboard available for you, without having to run anything in your cluster.
kustomize - Customization of kubernetes YAML configurations.
Kubewebhook - Small Go framework to create external admission webhooks for Kubernetes.
Submariner - Connect all your Kubernetes clusters, no matter where they are in the world.
ko - Tool for building and deploying Golang applications to Kubernetes.
Maybe You Don't Need Kubernetes (2019) (HN)
CLI for Amazon EKS - Simple CLI tool for creating clusters on EKS - Amazon's new managed Kubernetes service for EC2.
Kubernetes controller-runtime - Set of go libraries for building Controllers.
k3d - Lightweight alternative to KinD for local development.
Popeye - Kubernetes cluster resource sanitizer.
Kubernetes Test Infrastructure - Test infrastructure for the Kubernetes project.
Katib - Hyperparameter Tuning on Kubernetes.
Kapitan - Generic templated configuration management for Kubernetes, Terraform and other things.
How Airbnb Simplified the Kubernetes Workflow for 1000+ Engineers (2019)
Boosting your kubectl productivity (2019)
Polaris - Validation of best practices in your Kubernetes clusters.
qlkube - GraphQL api for Kubernetes.
Typhoon - Minimal and free Kubernetes distribution.
Kontemplate - Extremely simple Kubernetes resource templates.
OpenKruise/Kruise - Automate application workloads management on Kubernetes.
Monday - Dev tool for microservice developers that run local applications and/or forward some others from Kubernetes or over SSH.
Ballista - PoC of distributed compute platform using Rust, Apache Arrow, and Kubernetes. Article
Octant - Web-based, highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
shipcat - Standardisation tool and security layer on top of kubernetes to config manage microservices.
Okteto - Rapidly iterate and test your applications by developing directly in your Kubernetes cluster.
Fabrikate - Making GitOps with Kubernetes easier one component at a time.
Seldon Core - Machine Learning Deployment for Kubernetes.
Kubeval - Validate your Kubernetes configuration files, supports multiple Kubernetes versions.
Conftest - Write tests against structured configuration data using the Open Policy Agent Rego query language.
Kuma - Universal Control Plane for your Service Mesh. (Web)
Knative Eventing - Contains a work-in-progress eventing system that is designed to address a common need for cloud native development.
Navigator - Kubernetes extension for managing common stateful services on Kubernetes.
kube-aggregator - Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy.
Kubernetes Networking: Behind the scenes (2019)
Kubernetes Networking recommended reading list
service-catalog - Consume services in Kubernetes using the Open Service Broker API.
kuberNix - Kubernetes development cluster bootstrapping with Nix packages.
Autoscaler - Autoscaling components for Kubernetes.
Appsody - Provides everything you need to iteratively develop applications, ready for deployment to Kubernetes environments.
Gitkube - Build and deploy docker images to Kubernetes using git push.
Announcing Kubernetes Off-The-Shelf (KOTS) Software (2019)
chaoskube - Periodically kills random pods in your Kubernetes cluster.
kube-state-metrics - Simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
Cloudflow - Enables you to quickly develop, orchestrate, and operate distributed streaming applications on Kubernetes.
Clusterlint - Best practices checker for Kubernetes clusters.
An illustrated guide to Kubernetes Networking (2017)
Bank Vaults - Umbrella project which provides various tools for Vault to make using and operating Hashicorp Vault easier.
RBAC Manager - Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.
inlets-operator - Your private Kubernetes Service, with a public endpoint.
Chaos Mesh - Cloud-native Chaos Engineering platform that orchestrates chaos on Kubernetes environments.
Grafana Tanka - Flexible, reusable and concise configuration for Kubernetes.
Kubernetes Best Practices: Blueprints for Building Successful Applications on Kubernetes (2019)
PoC to write integration tests in Go with Kubernetes by Gianluca Arbezzano (2019)
kubethanos - Kills half of your randomly selected kubernetes pods.
k3c - Local container engine designed to fill the same gap Docker does in the Kubernetes ecosystem.
KubeNix - Kubernetes resource builder using nix.
Playing With Kubernetes: Nix, Kind And Kubenix
Postgres Operator - Creates and manages PostgreSQL clusters running in Kubernetes.
Contour - Kubernetes ingress controller using Lyft's Envoy proxy.
Roperator - Lets you easily write Kubernetes Operators in Rust.
Krustlet - Kubernetes Kubelet in Rust for running WASM. (Article) (Web)
WaeaveWorks - Operate and manage production ready Kubernetes with Weave Kubernetes Platform.
Gravity - Opinionated image-based Kubernetes packaging and management tools.
kubenav - Navigator for your Kubernetes clusters right in your pocket.
Kyverno - Kubernetes Native Policy Management. (Web)
Nirmata - Unified management plane for all your Kubernetes clusters and workloads.
Deep Dive into Kubernetes Internals for Builders and Operators (2020)
Rode - Cloud native software supply chain.
kube-monkey - Implementation of Netflix's Chaos Monkey for Kubernetes clusters.
Crash Course in Kubernetes: blog series (2020)
Fabio - Fast, modern, zero-conf load balancing HTTP(S) and TCP router for deploying applications managed by consul.
Rook - Storage Orchestration for Kubernetes.
Solo - Next generation API gateway to connect, secure and control traffic to any application on any infrastructure. (GitHub) (Workshops)
Gloo - Envoy-Powered API Gateway.
Keel - Kubernetes Operator to automate Helm, DaemonSet, StatefulSet & Deployment updates. (Web)
GLBC - Ingress controller for Google Cloud.
Kube Profefe - Continuous profiling made easy in Kubernetes with profefe.
Octant - Web-based, highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
Kubernetes Dashboard - General-purpose web UI for Kubernetes clusters.
Multi-tenancy - Working place for multi-tenancy related proposals and prototypes.
Kubevious - Application centric Kubernetes UI.
client-go - Go client for Kubernetes. (Examples)
Hubble - Network, Service & Security Observability for Kubernetes.
NATS Streaming Operator - Operator for managing NATS Streaming clusters running on Kubernetes.
What is your favorite Kubernetes feature that nobody seems to know about? (2020)
Advanced Persistence Threats: The Future of Kubernetes Attacks (2020)
Kubernetes Engine Samples
How to use Open Virtual Networking with Kubernetes
RBACSYNC - Automatically sync groups into Kubernetes RBAC.
Hub - Web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects.
apiserver - Library for writing a Kubernetes-style API server.
Active-Monitor - Kubernetes custom resource controller which enables deep cluster monitoring using Argo workflows.
kube-capacity - Simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster.
Kubelive - kubectl tool reinvented to be more reactive and interactive.
Lens - Kubernetes IDE. (Web)
Rancher Kubernetes Engine (RKE) - Extremely simple, lightning fast Kubernetes distribution that runs entirely within containers.
Prometheus Operator - Creates/configures/manages Prometheus clusters atop Kubernetes.
Rudr - Kubernetes Implementation of the Open Application Model.
k3sup - Light-weight utility to get from zero to KUBECONFIG with k3s on any local or remote VM.
CRI-O - OCI-based implementation of Kubernetes Container Runtime Interface.
Linkerd - Service mesh for Kubernetes and beyond. (Web)
linkerd2-proxy - World's best service mesh proxy.
Predictive Horizontal Pod Autoscaler
Kubie - More powerful alternative to kubectx and kubens. (Article)
Crossplane - Open source control plane to manage your infrastructure and applications the Kubernetes way. (Web) (Runtime) (GitHub)
Terrajet - Generate Crossplane Providers from any Terraform Provider.
xgql - GraphQL API for Crossplane.
Upbound - Open source, production-ready, vendor-supported distribution of Crossplane.
Kubernetes Network Policy Recipes
kube-prompt - Interactive kubernetes client featuring auto-complete.
Kubernetes Custom Resource API Reference Docs generator
oneinfra - Kubernetes as a Service platform. It empowers you to provide or consume Kubernetes clusters at scale, on any platform or service provider.
Anthos — Driving business agility and efficiency (2020) (HN)
netshoot - Docker + Kubernetes network trouble-shooting swiss-army container.
Domesticating Kubernetes: Kubernetes as home server on bare metal in 150 minutes (2020) (HN)
ktunnel - Expose your local resources to kubernetes.
Kubeletctl - Client for kubelet.
Coding a real-time dashboard for Kubernetes
Build a Graph of Kubernetes API Objects in Go (2020)
Building a TODO API in Golang with Kubernetes (2020)
Permission manager - Enables a super-easy and user-friendly RBAC management for Kubernetes.
kube-score - Tool that performs static code analysis of your Kubernetes object definitions.
k3s - Lightweight Kubernetes distribution by Rancher.
10 common mistakes using kubernetes (2020)
Goldilocks - Get your resource requests "Just Right".
Lokomotive - Open source Kubernetes distribution that ships pure upstream Kubernetes.
KFServing - Serverless Inferencing on Kubernetes.
kube-backup - Kubernetes resource state sync to git.
Why is Kubernetes getting so popular? (2020) (HN)
Sloop - Kubernetes History Visualization.
microcks - Kubernetes native tool for mocking and testing API and micro-services.
Weave Kubernetes System Control - wksctl - Allows simple creation of a Kubernetes cluster given a set of IP addresses and an SSH key.
stern - Multi pod and container log tailing for Kubernetes.
Kubernetes Metrics Server - Scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.
Source controller - Experimental source manager.
Cluster API - Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management.
Pulumi Kubernetes Resource Provider
aws-k8s-tester - Set of utilities and libraries for "testing" Kubernetes on AWS.
Go FlagZ - Dynamic, thread-safe flag variables that can be modified at runtime through etcd or Kubernetes.
Argo CD - Declarative Continuous Delivery for Kubernetes. (Example Apps)
Kubernetes Basic Learning - Understand Kubernetes step by step. A simple repo for beginners.
arkade - Kubernetes apps for developers.
Continuous Deployment to Kubernetes with Gitea and Drone (2020)
Lobsters: What has your experience with Kubernetes been like? (2020)
Kubernetes External Secrets - Integrate external secret management systems with Kubernetes.
A single-node Kubernetes cluster without virtualization or a container registry (2020)
A Hacker’s Guide to Kubernetes Networking (2017)
Multi-Cluster Kubernetes and Service Mesh Patterns (2020)
Tools to use with the controller-runtime libraries
How to Create Ephemeral Environments using Crossplane and ArgoCD? (2020)
Gitpod - Open-source Kubernetes application for automated and ready-to-code development environments that blends in your existing workflow. (Article) (Code) (Website Code)
HyScale - Abstraction framework over Kubernetes. (HN)
Kubernetes: Make your services faster by removing CPU limits (2020) (HN)
terraform-aws-eks - Terraform module to create an Elastic Kubernetes (EKS) cluster and associated worker instances on AWS.
Kubernetes YAML Generator (HN)
What we learned after a year on Kubernetes (2020) (HN) (Tweet)
Awesome Kubernetes Resources
Reducing AWS data transfer cost — Going Multi-AZ to Single-AZ Kubernetes (2020)
kube-events-exporter - Kubernetes events aggregator and exporter.
Structured Merge and Diff - Test cases for Kubernetes "apply" operation.
kubecolor - Colorize your kubectl output.
MicroK8s - Small, fast, single-package Kubernetes for developers, IoT and edge. (Web) (HN) (HN)
Evolution of k8s worker nodes (2020)
Kiali - Service mesh observability and configuration. (Kiali Operator) (Kiali Front End)
KubeVirt - Kubernetes Virtualization API and runtime in order to define and manage virtual machines. (Web) (HN)
Cluster Turndown - Automated turndown of Kubernetes clusters on specific schedules.
Kubernetes Enhancements
kubeaudit - Command line tool and a Go package to audit Kubernetes clusters for various different security concerns.
CustomResourceDefinitions Automatic Docs (Code)
Modernizing the Tech Stack for a B2B SaaS Product Running on Bare Metal (2020)
BotKube - App that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices. (Docs)
Isopod - Expressive DSL and framework for Kubernetes configuration without YAML.
Starboard - Kubernetes-native security tool kit.
kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark.
kube-hunter - Hunt for security weaknesses in Kubernetes clusters.
kubectl-who-can - Show who has RBAC permissions to perform actions on different resources in Kubernetes.
kOps - Kubernetes Operations (kops) - Production Grade K8s Installation, Upgrades, and Management.
KubeLinter - Static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
Gardener - Deliver fully-managed clusters at scale everywhere with your own Kubernetes-as-a-Service. (Web)
kraan - Building platforms on top of K8s. Helps you deploy and manage 'layers' on top of kubernetes.
Certified Kubernetes Security Specialist resources
Managing my personnal servers in 2020 with K3s (HN) (Lobsters)
stern - Multi pod and container log tailing for Kubernetes.
Kubectl Code
Sourcegraph on Kubernetes - Deploy Sourcegraph to a Kubernetes cluster for large-scale code search and intelligence.
Red Team KubeCTL Cheat Sheet
Move2Kube - Command-line tool that accelerates the process of re-platforming to Kubernetes/Openshift.
Knatify - Tool (or set of tools) that make it dead simple to migrate existing Kubernetes deployments into Knative Services.
k0s - Zero Friction Kubernetes. (HN)
Headlamp - Easy-to-use and extensible Kubernetes web UI. (Web) (HN)
kube-rs - Kubernetes client and futures controller runtime.
Cloud Development Kit for Kubernetes - Define Kubernetes native apps and abstractions using object-oriented programming. (Web)
How to get started contributing to Kubernetes (2020)
BuildKit CLI for kubectl - Tool for building container images with your Kubernetes cluster.
KubeVela - Easy-to-use tool that enables them to describe and ship their applications to Kubernetes with minimal effort. (Docs)
Swoll - Suite of applications and APIs for monitoring kernel-level activity on a live Kubernetes cluster.
illuminatio - Tool for automatically testing kubernetes network policies.
Metacontroller - Add-on for Kubernetes that makes it easy to write and deploy custom controllers in the form of simple scripts.
Karpenter - Metrics-driven autoscaler built for Kubernetes and can run in any Kubernetes cluster anywhere.
Kubectl Tricks
Kuber - Managed Kubernetes Cloud.
Kubernetes Website Code
Open Service Mesh (OSM) - Lightweight, extensible, Cloud Native service mesh that allows users to uniformly manage, secure, and get out-of-the-box observability features for highly dynamic microservice environments. (Web)
A better Kubernetes from the ground up (2020) (HN) (Lobsters)
Bootstrap OpenFaaS Cloud for your team
Kubernetes Examples - Contains a number of examples of how to run real applications with Kubernetes.
k8s-openapi - Rust bindings for the Kubernetes client API.
Helm Chart Testing - CLI tool for linting and testing Helm charts.
Amazon EKS Distro - Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters.
Virtual Kubelet Provider for Systemd
Isovalent - eBPF-powered Cloud Native Networking & Security. (GitHub)
Kubernetes Python Client
AWS Controllers for Kubernetes (ACK) - Lets you define and use AWS service resources directly from Kubernetes.
Learnings From Two Years of Kubernetes in Production (2020)
localizer - No-frills local development tool for service developers working in Kubernetes.
Velero - Backup and migrate Kubernetes resources and persistent volumes. (Code)
kured - Kubernetes Reboot Daemon.
version-checker - Kubernetes utility for observing the current versions of images running in the cluster, as well as the latest available upstream.
Octopod - Open-source self-hosted solution for managing multiple deployments in a Kubernetes cluster in a user-friendly web interface.
Argo Events - Event-driven Workflow Automation Framework. (Docs)
Pixie - Kubernetes Monitoring, Application Debug Platform. (Code)
Kubermatic - Enterprise Kubernetes Platform & Automated Multi-cloud Operations. (Code)
Kubelet Deep Dive: Writing a Kubelet in Rust (2020)
Image Builder - Cross provider Kubernetes image building utility.
Kubernetes Template Project
kube-vip - Kubernetes Control Plane Virtual IP and Load-Balancer.
Akri - Kubernetes Resource Interface for the Edge. (Akri a Year Later)
KubeEdge - Kubernetes Native Edge Computing Framework. (Code)
Picking a Kubernetes Orchestrator: Airflow, Argo, and Prefect (2020) (HN)
Operator SDK - SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding. (Web)
Kubectl Sheetcheat
Gentle introduction to Kubernetes
Kubernetes is a container orchestration system, but that's not the point (2020) (Lobsters)
helm-docs - Tool for automatically generating markdown documentation for helm charts.
Kubecost - Cross-cloud cost allocation models for workloads running on Kubernetes. (Web) (GitHub)
Kubernetes Pondering (2020) (Lobsters)
Accelerated Feedback Loops when Developing for Kubernetes with Conftest (2020)
kubectl-aliases - Programmatically generated handy kubectl aliases.
kubectl-neat - Clean up Kuberntes yaml and json output to make it readable.
Writing a Kubernetes CRD Controller in Rust (2019) (HN)
Lifting Developers’ Productivity with BuildKit CLI for kubectl (2021)
ekz - EKS-D Kubernetes distribution for desktop.
kustomize-controller - Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize.
faas-netes - Kubernetes controller for OpenFaaS.
Weave Scope - Troubleshooting & Monitoring for Docker & Kubernetes. (Web)
Kubernetes on Rails - Premium training course to get you up-to-speed on deploying web applications using Kubernetes.
apimachinery - Scheme, typing, encoding, decoding, and conversion packages for Kubernetes and Kubernetes-like API objects.
Marblerun - Service mesh for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native. (Web)
Awesome Kubernetes Operators
Suspicious pods - Prints a list of k8s pods that might not be working correctly.
Kubernetes Goat - Intentionally vulnerable cluster environment to learn and practice Kubernetes security. (Web)
Carvel - Provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes.
Kube-router - Turnkey solution for Kubernetes networking with aim to provide operational simplicity and high performance. (Web)
cuebectl - Truly declarative kubernetes manifests via cuelang.
Certified Kubernetes Security Specialist Study Guide
K3s Private Cluster - Deploy full fledged K3s private clusters with Terraform.
Scaling Kubernetes to 7,500 Nodes (2021) (HN)
Kubernetes API Visualized (2021)
Swift K8s Service Discovery - Discover pods of interest in a Kubernetes cluster as they become available.
k8dash - Simple Kubernetes real time dashboard and management.
Flux - Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit. (Web)
How to get to speak at KubeCon (2020)
EdgeNet - Kubernetes adapted for the network edge. It allows you to deploy applications to hundreds of nodes that are scattered across the internet. (Code)
Rancher - Enterprise Kubernetes Management. (Website Code) (GitHub)
Kosko - Organize Kubernetes manifests in JavaScript. (Code)
sample-apiserver - Demonstration of how to use the k8s.io/apiserver library to build a functional API server.
Kubernetes 101 series retrospective, and a new book (2021)
Kubernetes, Pods, Kubernetes Pod Concepts (2021)
Helmfile - Declaratively deploy your Kubernetes manifests, Kustomize configs, and Charts as Helm releases in one shot.
GetIstio - Integration, and lifecycle management CLI tool that ensures the use of supported and trusted versions of Istio.
Kubernetes Internals - Collection of resources that discuss the inner workings of Kubernetes.
Serverless Kubernetes (2021) (HN)
monokube - Monorepo deployment manager for k8s.
A Kubernetes User's Guide to HashiCorp Nomad (2021)
GKE Autopilot: an nodeless and elastic Kubernetes cluster mode (2021) (HN)
Google admits Kubernetes container tech is too complex (2021) (HN)
Take a look at Nomad before jumping on Kubernetes (2021) (HN)
K8GB - Kubernetes Global Balancer. (Code)
Kubernetes Networking Book - Guide for anyone who wants to deploy, manage, or troubleshoot a production scale Kubernetes network.
Jetstack Preflight - Automatically perform Kubernetes cluster configuration checks using Open Policy Agent (OPA).
Argo Rollouts - Progressive Delivery for Kubernetes.
Exploring Kubernetes Operator Pattern (2021)
kube-fledged - Kubernetes add-on for creating and managing a cache of container images directly on the worker nodes of a kubernetes cluster.
Awesome Kubernetes Security
Porter - Fully-managed PaaS that lets teams automate DevOps. Deploy and manage apps within AWS, GCP, DO, and more. (Code) (Dashboard)
Learnk8s - Kubernetes training company.
Kubernetes deployment strategies explained (Article)
kubectl-cost - CLI for determining the cost of Kubernetes workloads.
Capsule - Kubernetes Operator for multi-tenancy.
Wrangler - Framework for wrapping clients, informers, listers into a simple usable controller pattern that promotes some good practices.
Longhorn - Cloud native distributed block storage for Kubernetes. (Code)
Kubernetes README - What to Read to Learn More About Kubernetes. (Code)
Oxidizing the Kubernetes operator
A detailed guide to SSO on Kubernetes (HN)
KubePlus - CRD for CRDs to design multi-tenant platform services from Helm charts.
Kubectl build - Build dockerfiles directly in your Kubernetes cluster.
KDash - Fast and simple dashboard for Kubernetes.
Liqo - Platform to enable dynamic and decentralized resource sharing across Kubernetes clusters, either on-prem or managed. (Code)
Exploring the Kubernetes API with Curl (2021) (HN)
kubesql - Experimental tool to query K8s API using plain SQL.
Tilt - Multi-service dev environment for teams on Kubernetes. (Code)
Datree - Prevent Kubernetes misconfigurations. (Code) (HN)
AutoK3s - Fully certified Kubernetes offering, it can replace the "full-fat" K8s in some cases.
Scaling Kubernetes with Assurance at Pinterest (2021)
Admission Control - Helpful micro-framework for writing Kubernetes Admission Controllers.
DirectCSI - Container Storage Interface (CSI) driver for direct attached storage.
Karmada - Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration. (HN)
Fleet - Manage large fleets of Kubernetes clusters.
Prow - Kubernetes based CI/CD system.
Fluent Bit Operator
Devtron - Software Delivery Workflow For Kubernetes. (Code)
Native Kubernetes Continuous Delivery (2021)
Rio - Application Deployment Engine for Kubernetes. (Code)
kim - Kubernetes Image Manager.
node-disk-manager - Kubernetes Storage Device Management.
kcp - Minimal Kubernetes API server.
Open Source funding, Kim and Rancher Desktop with Matt Farina (2021)
Bare Metal Operator - Bare metal host provisioning integration for Kubernetes.
Ask HN: What do you think will come after Kubernetes? (2021)
Pinniped - Easy, secure way to log in to your Kubernetes clusters. (Web)
vcluster - Virtual Clusters For Kubernetes. (Web)
loft - Namespaces & Virtual Kubernetes Clusters For Engineering Teams. (GitHub)
Kubernetes Examples - Minimal self-contained examples of standard Kubernetes features and patterns in YAML. (Web)
How a Kubernetes Pod Gets an IP Address (2020)
Epinio - Opinionated platform that runs on Kubernetes and takes you from App to URL in one step. (Code)
Cyclonus - Tools for understanding, measuring, and applying network policies effectively in kubernetes.
Kubernetes: The Universal Control Plane (2020)
Falcosidekick - Simple daemon to help you with Falco's outputs.
Architecting Kubernetes clusters — choosing the best autoscaling strategy (2021)
netramesh - Ultra light service mesh for any orchestrator.
Kubernetes and Docker - An Enterprise Guide (2020) (Code)
naml - Not another markup language. Framework for replacing Kubernetes YAML with Go.
Calico - Open-source networking and security solution for Kubernetes. (Web)
Sidero - Bare metal provisioning system with support for Kubernetes Cluster API. (Code)
Orkestra - Cloud-native release orchestration and lifecycle management (LCM) platform for the fine-grained orchestration of inter-dependent helm charts and their dependencies.
Treat Kubernetes clusters as cattle, not pets (2021) (HN)
Everything useful I know about kubectl (HN)
Deckhouse Platform - Operator which creates homogeneous Kubernetes clusters anywhere and fully manages them.
Shell-operator - Tool for running event-driven scripts in a Kubernetes cluster.
Kadalu Storage - Lightweight Persistent storage solution for Kubernetes / OpenShift using GlusterFS in background. (Code)
SuperEdge - Open-source container management system for edge computing. It extends native Kubernetes to the edge in a non-intrusive way. (Code)
Krane - Kubernetes RBAC static Analysis & visualisation tool.
We don’t use Kubernetes (2021) (HN)
KEDA - Kubernetes Event-driven Autoscaling. (Code)
E2E Framework - Experimental Go framework for E2E testing of Kubernetes cluster components.
DevSpace - Fastest Developer Tool for Kubernetes. (Code)
KubeArmor - Container-aware Runtime Security Enforcement System. (Code)
External Secrets - Kubernetes operator reads information from a third party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets. (Docs)
NSA Kubernetes Hardening Guidance (2021) (HN) (HN)
Two year update: Building an Open Source Marketplace for Kubernetes (2021)
Tools to Run Kubernetes Locally (2021) (HN)
Kanister - Extensible framework for application-level data management on Kubernetes. (Code)
A Deep Dive into Kubernetes External Traffic Policies (2018)
KUR8 - Visual overview of Kubernetes architecture and Prometheus metrics.
Harbormaster - Anti-Kubernetes for your personal server. (HN)
KubeSurvival - Significantly reduce Kubernetes costs by finding the cheapest machine types that can run your workloads.
A Kubernetes engineer's guide to mTLS (2021)
Awesome Home Kubernetes - Awesome projects involving running Kubernetes at home.
Civo Kubernetes - Fast, Simple, Managed Kubernetes Service. (GitHub) (CLI)
The Guide to Kubernetes Labels (HN)
Chart Releaser - Hosting Helm Charts via GitHub Pages and Releases.
Kubescape - First tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA. (HN)
Kubernetes instance calculator (Code)
A visual guide on troubleshooting Kubernetes deployments (2021) (Tweet)
Kalm - Ready to use internal tools for your Kubernetes cluster. (Web)
Kubernetes Best Practices 101
Shipwright - Extensible framework for building container images on Kubernetes.
Kustomizer - Build, diff, apply, prune command-line utility for Kubernetes manifests and Kustomize overlays. Powered by Kubernetes server-side apply. (Web)
Flannel - Simple and easy way to configure a layer 3 network fabric designed for Kubernetes.
Kratix - Framework for building platforms on Kubernetes.
Colima - Docker (and Kubernetes) on macOS with minimal setup.
k8s-vault-webhook - Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers.
kubeapply - Lightweight tool for git-based management of Kubernetes configs.
Learning Kubernetes
Kubernetes Control Plane with keepalived
snoopy-operator - Cloud Native Way for Pod Deep Inspection.
Data scientists shouldn’t need to know Kubernetes (2021) (HN)
kubernetes-event-exporter - Export Kubernetes events to multiple destinations with routing and filtering.
Telepresence - Fast, efficient local development for Kubernetes microservices. (Web)
Peirates - Kubernetes Penetration Testing tool. (Web)
Kangal - Run performance tests in Kubernetes cluster with Kangal.
KinK - Helper CLI that facilitates to manage KinD clusters as Kubernetes pods.
hedge - Distributed systems library for Kubernetes deployments built on top of spindle and Cloud Spanner.
Tanzu Community Edition - Fully-featured, easy to manage, Kubernetes platform for learners and users. (Web)
Tanzu Framework - Set of building blocks to build atop of the Tanzu platform.
Rancher Desktop - Open-source project to bring Kubernetes and container management to the desktop. (Web) (HN)
Kubernetes Pod Inspector
Deploy NATS on Kubernetes with Helm Charts
kx - Interactively switch between kubernetes contexts without any external dependencies.
Local Path Provisioner - Dynamically provisioning persistent local storage with Kubernetes.
Cartographer - Kubernetes native Choreographer. Allows users to configure K8s resources into re-usable Supply Chains that can be used to define all of the stages that an Application Workload must go through to get to an environment.
Road to Secure Kubernetes - Tutorial on security hardening a containerized workload in Kubernetes.
Kubernetes RBAC
Carina - High performance and ops-free local storage for kubernetes.
Kube-queue - Designed to manage AI/ML and batch workloads in Kubernetes.
KuberLogic - Open-source platform that deploys and manages software on top of the Kubernetes cluster and turns infrastructure into a managed PaaS.
Nomad vs. Kubernetes (HN)
Inspektor Gadget - Collection of gadgets for debugging and introspecting Kubernetes applications using BPF.
nfproxy - Provide high performance and scalable kubernetes proxy supporting both ipv4 and ipv6.
Rancher Webhook - Validating admission webhook and mutating admission webhook for Kubernetes.
Kubernetes cleanup
Civo Kubernetes Marketplace - Marketplace of Kubernetes applications available for quick and easy installation in to Civo Kubernetes clusters.
Sieve - Automated, Distributed Systems Testing for Kubernetes Controllers.
Armada - Multi-cluster batch queuing system for high-throughput workloads on Kubernetes. (Web)
Automatically generated secrets for Kubernetes - Kubernetes controller for automatically generating and updating secrets.
Buildpacks in a Pod - Demonstrates running CNCF Buildpacks in a regular Kubernetes Pod.
Networking and Kubernetes Book (2021) (Twitter)
Kubeconform - Kubernetes manifests validation tool. Build it into your CI to validate your Kubernetes configuration.
policy-server - Webhook server that evaluates WebAssembly policies to validate Kubernetes requests.
Descheduler for Kubernetes
Kubernetes in Action Book (2021) (Code)
Autocert - Kubernetes add-on that automatically injects TLS/HTTPS certificates into your containers.
Step Issuer - Certificate issuer for cert-manager using step certificates CA.
Service Discovery in Kubernetes - Combining the Best of Two Worlds (2021)
LINSTOR - High Performance Software-Defined Block Storage for container, cloud and virtualisation. Fully integrated with Docker, Kubernetes, Openstack, Proxmox etc.
Piraeus Operator - Manages LINSTOR clusters in Kubernetes.
pv-migrate - CLI tool to easily migrate Kubernetes persistent volumes.
kubectl-slice - Split Kubernetes YAMLs into files.
kVDI - Virtual Desktop Infrastructure running on Kubernetes.
kubectl-select - kubectl extension to select from local config.
Operator Lifecycle Manager - Management framework for extending Kubernetes with Operators.
k - Experimental wrapper for kubectl.
kube-green - Make your k8s clusters more green.
Flagger - Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments). (Web)
Hadron - The Kubernetes native and CloudEvents native distributed event streaming, event orchestration & messaging platform.
Caelus - Set of Kubernetes solutions for reusing idle resources of nodes by running extra batch jobs.
Tricks - Run experiments effortlessly on top of Kubernetes.
Sunstone - Deploy Kubernetes resources with ease.
Kubernetes webhook certificate generator and patcher - Tools to help with self signed cert generation for Kubernetes test environment.
Watch and print changes in k8s
Argo CD Image Updater - Automatic container image update for Argo CD.
Clusternet - Managing Your Clusters (including public, private, hybrid, edge, etc) as easily as Visiting the Internet.
Build a Platform with KRM - Build a platform with the Kubernetes resource model.
Giant Swarm - Managed Kubernetes as a Service. (GitHub)
Loft - Namespace & Virtual Cluster Manager for Kubernetes.
kubesec.io - Security risk analysis for Kubernetes resources. (Code)
Control Plane - Secure Kubernetes from supply-chain and runtime attacks with a zero trust, continuous security approach. (GitHub)
Hacking Kubernetes Book
Argo-CD Autopilot - Tool which offers an opinionated way of installing Argo-CD and managing GitOps repositories.
Teresa - Open source tool to deploy apps to Kubernetes clusters.
Install a Kubernetes cluster on Hetzner in 5 minutes (7X cheaper than AWS) (Reddit) (HN)
Pulumi Kubernetes Deployments - Collection of Pulumi scripts I use to automate repetitive deployments of applications and services to Kubernetes.
Kubei - Vulnerabilities scanning and CIS Docker benchmark tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters.
Bovine - Manage single node Rancher clusters with a single binary.
Mirantis - Data Center as-a-Service built on Kubernetes. (GitHub)
Kr8s - Docker/Kubernetes Visualization Tool.
Kubernikus - Kubernetes as a Service for Openstack.
Keppel - Multi-tenant container image registry.
Hands-on tutorial and Automation stack for an operations-ready DigitalOcean Kubernetes (DOKS) cluster
Building a bare-metal Kubernetes cluster on Raspberry Pi (2021) (HN)
flagger-k6-webhook - Using k6 to do load testing of the canary before rolling out traffic.
From Docker to Kubernetes using Minikube remotely (2021)
Argo CD Notifications
Certified Kubernetes Application Developer (CKAD) Crash Course
KubeMQ - Kubernetes Message Queue Broker Platform. (Code)
Kubedev - Simpler and more powerful Kubernetes Dashboard.
EKS Connector - Client-side agent that connects any Kubernetes cluster to AWS.
APIClarity - Reconstruct Open API Specifications from real-time workload traffic seamlessly. (Web)
Service Mesh Interface - Standard interface for service meshes on Kubernetes. (Spec)
Meshery - Service Mesh Manager. (Code)
Argo Workflows - Workflow engine for Kubernetes.
tsk - Quickly connect to your Kubernetes Cluster with Tailscale.
Generically working with Kubernetes objects in Go (2021)
Kubetools - Curated List of Kubernetes Tools.
Neco - Project to build and maintain highly automated on-premise data centers using Kubernetes at the center of its system.
audit2rbac - Autogenerate RBAC policies based on Kubernetes audit logs.
kube-lineage - CLI tool to display all dependencies or dependents of an object in a Kubernetes cluster.
AWS version of Kelsey's kubernetes-the-hard-way
Kubernetes at Home With K3s (2021) (Lobsters)
Admiralty - System of Kubernetes controllers that intelligently schedules workloads across clusters. (Code)
Kubernetes on AWS - Deploying Kubernetes on AWS with CloudFormation and Ubuntu.
Awesome Kubernetes Security
cluster-api-state-metrics (CASM) - Service that listens to the Kubernetes API server and generates metrics about the state of custom resource objects related of Kubernetes Cluster API.
Dataflow - Kubernetes-native platform for executing large parallel data-processing pipelines.
Fluid - Fluid, elastic data abstraction and acceleration for BigData/AI applications in cloud. (Web)
Volcano - Batch system built on Kubernetes. (Web)
The Ultimate Kubectl Cheat Sheet
Kstone - etcd management platform.
Okra - Hot-swap Kubernetes clusters while keeping your service up and running.
Kubernetes Python Client - Asynchronous (AsyncIO) client library for the Kubernetes API.
kspan - Turning Kubernetes Events into spans. (Tweet)
Kubernetes Cloudflare Sync - Run in your Kubernetes Cluster on GKE and sync DNS records on Cloudflare with your nodes IPs.
Knative Docs (Code)
CSI NFS driver - Allows Kubernetes to use NFS CSI volume on Linux node.
simple-kubernetes-webhook - Aimed at illustrating how to build a fully functioning kubernetes admission webhook in the simplest way possible.
terminus - Graceful shutdown and Kubernetes readiness / liveness checks for any Node.js HTTP applications.
ctlptl - Making local Kubernetes clusters fun and easy to set up.
Cloudprober - Active monitoring software to detect failures before your customers do. (Docs)
Ketch - Application delivery framework that facilitates the deployment and management of applications on Kubernetes using a simple command line interface.
Vault Secrets Operator - Create Kubernetes secrets from Vault for a secure GitOps based workflow.
kubecfg - Tool for managing Kubernetes resources as code.
Kubergrunt - Standalone go binary with a collection of commands to fill in the gaps between Terraform, Helm, and Kubectl.
provider-kubernetes - Crossplane provider to provision and manage Kubernetes objects on (remote) Kubernetes clusters.
kube-s3 - Kubernetes pods used shared S3 storage.
K8S-ObjectMatcher - Go library which helps to match Kubernetes objects.
Sidero Labs - Makers of Talos Linux: A modern OS for Kubernetes and Sidero Metal: simplifying bare metal Kubernetes. (GitHub)
k8sec - CLI tool to manage Kubernetes Secrets easily.
Mizu - API traffic viewer for Kubernetes.
Spawner - Bridge between a web application and Kuberenetes. Allows a web application to create session-lived containers that serve WebSocket or HTTP connections.
kwatch - Monitor & detect crashes in your Kubernetes(K8s) cluster instantly.
Bare-metal CSI Driver - CSI spec implementation to manage locally attached disks for Kubernetes.
1 Kubectl Kubernetes CheatSheet
Crane - Manages cloud resource on Kubernetes stack.
Otomi - GitOps powered K8s app stack with developer self-service. (Docs)
Havener - Swiss army knife for Kubernetes tasks.
ktop - top-like tool for your Kubernetes clusters.
k8svent - Send Kubernetes pods as JSON to webhook endpoints.
Web-based Kubernetes scheduler simulator
Kubernetes security - Kubernetes security notes and best practices.
OpenYurt - Extending your native Kubernetes to edge. (Web)
RancherOS v2 - Immutable Linux distribution built to run Rancher and it's corresponding Kubernetes distributions RKE2 and k3s.
eBPF & Cilium Office Hours
Wave - Kubernetes configuration tracking controller.
Ask HN: Is it still worth learning Kubernetes in 2022?
Auto-portforward (apf) - Bidirectional port-forwarding for docker and kubernetes.
Podtato-head - Prototypical cloud-native application built to colorfully demonstrate delivery scenarios using many different tools and services.
Apache Camel K - Lightweight integration platform, born on Kubernetes, with serverless superpowers. (Docs)
KubExplorer - Detects orphan configmaps and secrets in a Kubernetes cluster.
Pleco - Automatically removes Cloud managed services and Kubernetes resources based on tags with TTL.
OpenEBS - Kubernetes storage simplified. (Code)
Kusk - Use OpenAPI to configure Kubernetes.
System Upgrade Controller - General-purpose, Kubernetes-native upgrade controller (for nodes).
Kourier - Purpose-built Knative Ingress implementation using just Envoy with no additional CRDs.
JavaScript Kubernetes Client
Kubernetes Secrets Store CSI Driver
Cilium CLI - CLI to install, manage & troubleshoot Kubernetes clusters running Cilium.
TestKube - Kubernetes-native framework for test definition and execution.
Tracing the path of network traffic in Kubernetes (2022)
Learnk8s Blog
Kove - Watch your in cluster Kubernetes manifests for OPA policy violations and export them as Prometheus metrics.
Reasons Kubernetes is so complex (2022) (HN)
Kubernetes Gateway API - Repository for the next iteration of composite service (e.g. Ingress) and load balancing APIs.
Yatai - Model serving at scale on Kubernetes.
Minigun - Highly performant Kubernetes native HTTP benchmark tool written in Go.
konfig - Helps to merge, split or import kubeconfig files.
How To Call Kubernetes API using Go (2022)
kube-applier - Enables automated deployment and declarative configuration for your Kubernetes cluster.
Resource Explorer - Explore your kube resource usage and allocation.
kube-storage-version-migrator - Migrates stored data in etcd to the latest storage version.
Atlas - Deployment pipeline platform built on Argo CD.
CNCF App Delivery TAG
kube-oidc-proxy - Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.
A Primer: Accessing services in Kubernetes (2022) (HN)
kubewatch - Watch k8s events and trigger Handlers.
kubectl-neat-diff - De-clutter your kubectl diff output using kubectl-neat.
kube-rbac-proxy - Kubernetes RBAC authorizing HTTP proxy for a single upstream.
Fast-Kubernetes - Covers Kubernetes Environment with LABs: Kubectl, Pod, Deployment, Service, ConfigMap, ReplicaSet, PV, PVC, Secret, etc.
k3OS - Purpose-built OS for Kubernetes, fully managed by Kubernetes.
Last Week in Kubernetes Development Newsletter (Code)
SMI SDK for Go - Service Mesh Interface SDK for Go.
KubeOrbit - Test your application on Kubernetes in a brand new simple way. (Code)
Trousseau - Store and access your secrets the Kubernetes native way with any external KMS.
Machine API Operator - Manages the lifecycle of specific purpose CRDs, controllers and RBAC objects that extend the Kubernetes API.
Kuber - Julia Kubernetes Client.
kbrew - CLI tool for Kubernetes which makes installing any complex stack easy in one step.
Zarf - Kubernetes Air Gap Buddy.
Kueue - Kubernetes-native Job Queueing.
Kubernetes based network emulation
Gefyra - Blazingly-fast, rock-solid, local application development with Kubernetes.
Digester - Resolves tags to digests for container and init container images in Kubernetes Pod and Pod template specs.
kube-review - Create Kubernetes AdmissionReview requests from Kubernetes resources.
ValidKube - Validate, Clean & Secure Your K8s YAML. (Code)
KubeSphere - Open Source Enterprise Kubernetes Platform. (Code)
Kubetest2 - Framework for launching and running end-to-end tests on Kubernetes.
DETIK - DevOps e2e Testing in Kubernetes.
Knative Reconciler Test - Behavior driven reconciler testing framework.
KUTTL - Designed for testing operators, however it can declaratively test any kubernetes objects.
KET - Simplest testing framework for Kubernetes controller.
Pixie - Kubernetes Monitoring, Application Debug Platform. (Demos)
Reloaderai - Kubernetes controller to watch changes in ConfigMap and Secrets.
Speed Limits for Rolling Restarts in Kubernetes (2021)
ktail - Tool to easily tail Kubernetes logs.
Kube-burner - Tool aimed at stressing Kubernetes clusters by creating or deleting a high quantity of objects.
Complete Kubernetes Tutorial for Beginners - YouTube (2020)
How Kubernetes works under the hood with Docker Desktop (2022)
TriggerMesh - Open source event-driven integration platform powered by Kubernetes and Knative.
kCTF - Kubernetes-based infrastructure for CTF competitions.
Using client-go: Writing Go clients for talking to Kubernetes (2022) (Code)
Robusta - Kubernetes Troubleshooting and Automation Platform. (Code)
Terrajet Template Provider - Crossplane provider that is built using Terrajet code generation tools and exposes XRM-conformant managed resources for the Template API.
KoolKits - Opinionated, language-specific, batteries-included debug container images for Kubernetes.
kubediff - Kubernetes resource diff watcher, with the ability to send event notifications.
The Future of Kubernetes (2022) (HN)
Certified Kubernetes Administrator Preparation Guide
Akcess - Share fine-grained access to your Kubernetes cluster temporarily.
Monokle - Desktop UI for managing k8s manifests.
Linkerd-failover - Linkerd Failover Operator.
Favorite tools you use to manage/work with Kubernetes? (2022)
Helm X Plugin - Treat any Kustomization or K8s manifests directory as a Helm chart.
Kubernetes models in TypeScript
Helm Teller - Allows you to inject configuration and secrets from multiple providers into your chart while masking the secrets at the deployment.
Problems with “graceful shutdown” in Kubernetes (2019) (HN)
Pod Graceful Drain
Portieris - Kubernetes Admission Controller for verifying image trust with Notary.
Platform Aware Scheduling - Enabling Kubernetes to make pod placement decisions with platform intelligence.
Canary Deployment with Kubernetes and Istio (2022)
Thundernetes - Makes it easy to run your game servers on Kubernetes.
Continuous profiling by Pyroscope (2022)
jsPolicy - Easier & Faster Kubernetes Policies using JavaScript or TypeScript.
Furiko - Cloud-native, enterprise-level cron and adhoc job platform for Kubernetes.
Kubernetes Opex Analytics - Kubernetes Usage Analytics and Accounting for Cost Allocation and Capacity Planning.
lifecycle-manager - Graceful AWS scaling event on Kubernetes using lifecycle hooks.
Koordinator - QoS based scheduling system for hybrid orchestration workloads on Kubernetes, bringing workloads the best layout and status.
KubeView - Kubernetes cluster visualiser and graphical explorer.
Selkies - Stateful Workload Operator.
selinuxd - Daemon that has the purpose of installing and removing policies as they are laid in a specific directory.
Kubernetes Rollout Operator - Coordinates the rollout of pods between different StatefulSets within a specific namespace.
Operator Registry - Runs in a Kubernetes or OpenShift cluster to provide operator catalog data to Operator Lifecycle Manager.
Kubernetes API is a regular HTTP REST API. How to add a new request handler. (2022)
Working with Kubernetes API (2022) (Tweet)
Kubernetes Release Tooling - Release infrastructure for Kubernetes and related components.
StackRox Kubernetes Security Platform - Performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.
Shipper - Kubernetes native multi-cluster canary or blue-green rollouts using Helm.
kaar - Kubernetes Application Archive.
Kubectl Grep - Filter Kubernetes resources by matching their names.
KubeKey - Open-source lightweight tool for deploying Kubernetes clusters.
OPAL - Policy and data administration, distribution, and real-time updates on top of Open Policy Agent.
Service mesh for Kubernetes and beyond. gRPC API bindings repo for Linkerd 2.x.
Kubernetes Cluster Federation - Allows you to coordinate the configuration of multiple Kubernetes clusters from a single set of APIs in a hosting cluster.
Zeitgeist - Language-agnostic dependency checker that keeps track of external dependencies across your project and ensure they're up-to-date.
MPI Operator - Kubernetes Operator for MPI-based applications (distributed training, HPC, etc.).
Node Feature Discovery Operator - Operator for managing Node Feature Discovery deployment.
Node Feature Discovery - Node feature discovery for Kubernetes.
Kepler (Kubernetes-based Efficient Power Level Exporter) - Uses eBPF to probe energy related system stats and exports as Prometheus metrics.
Tekton TaskGroup Custom Task - Allows to group Task together as a Task.
Container Runtime Interface (CRI) - Plugin interface which enables kubelet to use a wide variety of container runtimes.
Kyma - Easy way to extend enterprise applications on Kubernetes. (Code)
kubectl-rolesum - Summarize RBAC roles for the specified subject (ServiceAccount, User and Group).
Beetle - Kubernetes multi-cluster deployment automation service.
Nubenetes: Awesome Kubernetes & Cloud (Code)
KubeRay - Toolkit to run Ray applications on Kubernetes.
GitOps recipe for Progressive Delivery with Flux v2, Flagger and Istio
kubert - Rust Kubernetes runtime helpers. Based on kube-rs.
Stateless Kubernetes overlay networks with IPv6 (2021)
keptn - Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications. (Code)
The Missing Kubernetes Type System (2022) (HN)
kpt - Git-native, schema-aware, extensible client-side tool for packaging, customizing, validating, and applying Kubernetes resources.
k8s_gateway - CoreDNS plugin to resolve all types of external Kubernetes resources.
kubectl-explore - Better kubectl explain with the fuzzy finder.
Kubent - Easily check your clusters for use of deprecated APIs.
oom-bonker - Delightfully silly way to be alerted when your Kubernetes containers run out of memory.
punch - Fully automated one-click experience for people to create Cloud and Kubernetes environment to run their Data Analytics workload like Apache Spark.
Antrea - Kubernetes networking based on Open vSwitch.
kubewarden-controller - Manage admission policies in your Kubernetes cluster with ease.
OpenFeature - Open standard for feature flags. (Spec) (HN) (Community)
Plain Kubernetes Secrets are fine (2022) (Lobsters)
Kong Ingress Controller for Kubernetes (KIC)
Don't Write Your Own Kubernetes YAML Generator (2022)
Kube Dev Dashboard - Dev Dashboard for Kubernetes. (Code)
Deploying Kubernetes clusters in increasingly absurd languages (2022) (HN)
kfmt - Organizes Kubernetes manifests into a standard format.
Kedro Airflow K8S Plugin - Kedro Plugin to support running pipelines on Kubernetes using Airflow.
Tekton Triggers - Kubernetes Custom Resource Definition (CRD) controller that allows you to create Kubernetes resources based on information it extracts from event payloads.
Envoy Gateway - Manages Envoy Proxy as a standalone or Kubernetes-based application gateway.
Waiter - Runs, manages, and autoscales web services on Mesos and Kubernetes.
Cook Scheduler - Fair job scheduler on Kubernetes and Mesos for batch workloads and Spark.
Parca Agent - Always-on sampling profiler that uses eBPF to capture raw profiling data with very low overhead.
WTH! Who killed my pod - Whodunit? (2021)
Kubedog - Library to watch and follow Kubernetes resources in CI/CD deploy pipelines.
Kubernetes Networking Guide (Code)
Manage multi-tenant clusters with Flux
RBAC-Police - Evaluate the RBAC permissions of service accounts, pods and nodes in Kubernetes clusters through policies written in Rego.
k8s-sidecar - Docker container intended to run inside a kubernetes cluster to collect config maps with a specified label and store the included files in a local folder.
Kubernetes course
Minikube - Quickly sets up a local Kubernetes cluster. (HN)
resource-metadata - API for defining metadata about Kubernetes resources.
Free Kubernetes - List of Free Trials of Managed Kubernetes Services.
ksync - Sync files between your local system and a kubernetes cluster.
Astro CLI - CLI that makes it easy to create, test and deploy Airflow DAGs to Astronomer. (Web) (GitHub)
Ask HN: If Kubernetes is the solution, why are there so many DevOps jobs? (2022)
Kritis - Deploy-time Policy Enforcer for Kubernetes applications.
Stop Messing with Kubernetes Finalizers (2022)
Kubernetes Reference Docs - Tools to build reference documentation for Kubernetes APIs and CLIs.
Rego Style Guide
Rufio - Kubernetes controller for managing baseboard management state and actions.
Eraser - Cleaning up images from Kubernetes nodes.
Multus CNI - Enables attaching multiple network interfaces to pods in Kubernetes.
BYOH - Cluster API Infrastructure Provider for already-provisioned hosts running Linux.
Etcd-Backup-Restore - Collection of components to backup and restore the Etcd of a Kubernetes cluster.
Pisanix - Modern database governance framework for Kubernetes. Pisanix adds SQL-aware traffic control, audit, security and extension abilities to help manage various databases in the Database Mesh way.
Kube-Hetzner - Optimized and Maintenance-free Kubernetes on Hetzner Cloud in one command.
Kubernetes Off-The-Shelf (KOTS - kubectl plugin and admin console to help manage Kubernetes Off-The-Shelf software. (Web)
kURL - Production-grade, airgapped Kubernetes installer combining upstream k8s with overlays and popular components. (Web)
Replicated - Enabling the delivery and management of modern on-prem Kubernetes applications. (GitHub)
Harness CD - Modern self-service continuous delivery solution that allows developers to deploy, verify and automatically rollback Kubernetes and other cloud-native applications.
Kubeflow Training Operator - Kubernetes custom resources that makes it easy to run distributed or non-distributed TensorFlow/PyTorch/Apache MXNet/XGBoost/MPI jobs on Kubernetes.
Cluster capacity analysis framework
kubectl-images - Show container images used in the cluster.
Don't use Kubernetes yet (2022) (HN)
OpenELB - Load Balancer Implementation for Kubernetes in Bare-Metal, Edge, and Virtualization. (Code)
Ask HN: What is your Kubernetes nightmare? (2022)
Paralus - All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
HTPC powered by k3s
Managing Kubernetes without loosing your cool (2022)
Plural - Multi-cloud, multi-prem application deployments for kubernetes in minutes. (Code)
mirrord - Lets you easily mirror traffic from your Kubernetes cluster to your development environment. (Code) (mirrord internals - hooking libc functions in Rust and fixing bugs)
HyperShift OpenShift - Clusters with hosted control planes.
kube-job - Run one off job on kubernetes from the command line tool.
KubeFire - Create and manage Kubernetes clusters running on FireCracker microVMs via weaveworks/ignite.
Kube-Beacon - Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification.
kubespace - Tool to create namespaces and service accounts that can safely be handed to CI or users.
k8s - Go library implements various handlers to more easy manipulate k8s resources such as pods, deployments, etc, inside or outside k8s cluster.
KubeGateway - Best practice for managing massive kubernetes clusters within ByteDance.
Boskos - Resource management service that provides reservation and lifecycle management of a variety of different kinds of resources.
kudo - sudo for Kubernetes.
How Kubernetes Reinvented Virtual Machines (in a good sense) (2022)
Ask HN: Have You Left Kubernetes? (2022)
Acorn - Simple application deployment framework for Kubernetes. (Web) (HN)
Meta configuration for Kubernetes GitHub Org
What a Kubernetes pod truly is (2022)
BadRobot - Operator Security Audit Tool.
Falling for Kubernetes (2022) (HN)
Discoblocks - Open Source declarative disk configuration system for Kubernetes.
Scaling Kubernetes to Thousands of CRDs (2022)
Nova - Find outdated or deprecated Helm charts running in your cluster.
Kubernetes Was Never Designed for Batch Jobs (2022) (Lobsters)
Parseable - Cloud native log storage and management for Kubernetes, containerised workloads. (Docs) (HN)
k8s-client-go - Minimal Go Kubernetes client based on Generics.
Pulumi Kubernetes Operator - Kubernetes operator that provides a CI/CD workflow for Pulumi stacks using Kubernetes primitives.
run-job - Run a Kubernetes Job and get the logs when it's done.
fubectl - Reduces repetitive interactions with kubectl.
Kusion - Engine of KusionStack for parsing user's intentions and making them effect in infrastructures.
Chaos Mesh (2022)
Visual Argo Workflows - Drag and drop Argo Workflows tool.
Open-Simulator - Cluster simulator for Kubernetes.
The Book of Kubernetes (2022)
kubectl-watch - Watch tool with visualization view of delta change for kubectl.
Kubectl-debug - Debug a target container in a Kubernetes cluster by automatically creating a new, non-invasive, 'debug' container.
Consul on Kubernetes - First-class support for Consul Service Mesh on Kubernetes.
Useful Kubernetes tools (2022)
Kusk Gateway - Enables you to design and configure your APIs from single OpenAPI manifest.
Kubefirst CLI - GitOps Infrastructure & Application Delivery Platform.
Kluctl - Missing glue that puts together your (and any third-party) deployments into one large declarative Kubernetes deployment.
Hera - Argo Workflows Python SDK.
Constellation - Kubernetes engine that aims to provide the best possible data security.
KubeProber - Large-scale Kubernetes cluster diagnostic tool.
vault-k8s - First-class support for Vault and Kubernetes.
Why Fix Kubernetes and Systemd? (2022) (HN)
Under-documented Kubernetes Security Tips (2022)
Auraed - Runtime daemon. Simplified systemd and kubelet alternative. Built for modern platform teams.
metrics-agent - Collects allocation metrics from a Kubernetes cluster system and sends the metrics to cloudability.
Kamaji - Deploys and operates Kubernetes at scale with a fraction of the operational burden.
Palaemon - Open-source developer tool for monitoring health and resource metrics of Kubernetes clusters and analyzing Out of Memory (OOMKill) errors.
jsonnet-controller - Fluxcd controller for managing manifests declared in jsonnet.
Ability to create Kata PODs using cloud provider APIs
provider-argocd - Crossplane provider to provision and manage ArgoCD objects.
Kubernetes Hardening Guide (2022) (HN)
Why We Use CUE (and Not Helm) (2022) (Lobsters)
MicroShift - Small form factor OpenShift/Kubernetes optimized for edge computing.
Konf - Lightweight kubeconfig Manager.
crdoc - Generate markdown documentation from Kubernetes Custom Resource Definition (CRD) YAML files.
CKAD Exercises - Set of exercises to prepare for Certified Kubernetes Application Developer exam by Cloud Native Computing Foundation.
Kubernetes OpenAPI Spec
Using flux to automate simple tasks (2022) (HN)
Running Synthetic Checks at Scale with Kubernetes (2022)
Visualizing Kubernetes Traffic (2021)
Numaflow - Kubernetes-native platform to run massively parallel data/streaming jobs.
KubeShare - Share GPU between Pods in Kubernetes.
Murre - On-demand, scaleable source of container resource metrics for K8s.
Helm Dashboard - Simplified way of working with Helm.
Multi cluster kubectl Client - Run kubectl commands against multiple clusters at once. (Intro)
Tips and Tricks Developing a Kubernetes Controller (2022)
Herd Your Clusters Like Cattle: How We Automated our Clusters (2022)
The Kubernetes Discovery Cache: Blessing and Curse (2022)
My Simple Kubernetes Setup for Side Projects (2022)
KubeTunnel - Develop locally while being connected to Kubernetes.
Solving common problems with Kubernetes (2022) (HN)
Argo CD Extensions - Support for extending Argo CD.
Argo CD Vault Plugin - Retrieve secrets from Secret Management tools and inject them into Kubernetes secrets.
Apply Kubernetes Manifests in Backstage
Argo Rollouts at scale: Bringing Automated Rollbacks to 2,100+ services at Monzo (2022)
NooBaa Operator - Object data service for hybrid and multi cloud environments.
Varnish on Kubernetes
Kubernetes API definition
Cybozu Kubernetes Engine - Distributed service that automates Kubernetes cluster management.
MOCO - MySQL operator on Kubernetes.
Kubernetes Gateway API bindings in Rust
Cloud Foundry on Kubernetes
Mini-Kube-Scheduler - Scheduler for learning Kubernetes Scheduler.
Hierarchical Namespace Controller (HNC) - Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy. (User Guide)
kevent - Simple library for creating Kubernetes events.
CRDs Catalog - Over 100 popular Kubernetes CRDs (CustomResourceDefinition) in JSON schema format.
Kubernetes CRDs
What are Kubernetes CRDs, and should you be bothered about them? (2022)
Launchpad - Build, Publish, and Deploy to Kubernetes with a single command.
Kubernetes Bootstrapper - Extendable framework to set up production grade clusters.
Kine - Run Kubernetes on MySQL, Postgres, sqlite, dqlite, not etcd.
Roadmap to learn Kubernetes from scratch
k8spacket - Packets traffic visualization for Kubernetes.
Kubernetes Gateway API bindings in Rust
cnquery - Cloud-native tool for querying your entire fleet. It answers thousands of questions about your infrastructure, and integrates with over 300 resources across cloud accounts, Kubernetes, containers, services, VMs, APIs, and more.
Deploying Nix-built containers to Kubernetes (2022)
Kubernetes Cordon: How It Works and When to Use It (2022) (HN)
Kubeshark - API Traffic Viewer for Kubernetes. (HN)
Learn Kubernetes with Google (HN)
kubectl foreach - Run kubectl commands in all/some contexts in parallel.
KubeBrain - High Performance Metadata System for Kubernetes.
Trivy-Operator - Kubernetes-native security toolkit.
Helm-Controller - GitOps Toolkit Helm reconciler, for declarative Helming.
scuttle - Kubelet graceful node drain/delete and spot termination watcher.
mindthegap - Easily create and use bundles for air-gapped environments.
Barco Streams - Lightweight & elastic kubernetes-native event streaming system.
Kubermatic KubeOne - Automate cluster operations on all your cloud, on-prem, edge, and IoT environments.
Claudie - Cloud-agnostic managed Kubernetes.
Enclaver - Open source toolkit created to enable easy adoption of software enclaves.
Open-Local - Local disk management system composed of multiple components.
Lagoon - Developer-focused application delivery platform.
Self Node Remediation - Automatic repair for unhealthy Kubernetes nodes.
K8s Node Health Check Operator
Worker Pod Autoscaler - Kubernetes autoscaler for the workers. Resource is called WPA. Queues Supported: SQS, Beanstalkd.
K8S Objects Generator - CLI tool that generates Kubernetes Go types that can be used with TinyGo starting from the official OpenAPI spec.
How to onboard an existing Helm application in ArgoCD (2022)
echoperator - Simple Kubernetes operator built from scratch with client-go.
Kubernetes Controller Sharding
Zeus - Visualize your Kubernetes clusters through a GUI and query cluster data through custom command lines in your terminal.
From Monolith to K8s - Workshop-style guide for creating Cloud-Native applications running on top of Kubernetes.
k8s-image-swapper - Mirror images into your own registry and swap image references automatically.
Kiae - Open-source cloud platform completely based on Kubernetes and Istio.
k0s - Zero Friction Kubernetes.
Nix to Kubernetes - Example of deploying Nix-built Docker images to Kubernetes.
code-generator - Generators for kube-like API types.
Klotho - CLI tool that transforms plain code into cloud native code.
ChatGPT bot for Kubernetes issues
Upgrading Kubernetes - A Practical Guide (2023)
kinitiras - Programmable rule engine for k8s admission webhook.
Scylla Operator
nos - Module to Automatically maximize the utilization of GPU resources in a Kubernetes cluster.
Clustertest - Framework for orchestrating clusters of nodes for testing.
Traefik Hub Agent for Kubernetes
Vals - Helm-like configuration values loader with support for various sources.
KubeVela Workflow - Declarative Workflow of KubeVela which can run as standalone.
Namespace - Application development platform that helps you manage your development, testing, and production workflows, in a consistent and unified way.
kwok - Kubernetes without Kubelet - Simulates thousands of Nodes and Clusters.
sealos - Kubernetes distribution, a general-purpose cloud operating system for managing cloud-native applications.
OpenID Connect Webhook Authenticator for Kubernetes
cloudtty - Kubernates Cloud Shell (Web Terminal) Operator.
NVIDIA Driver Manager For Kubernetes
kube-image-keeper - Container image caching system for Kubernetes.
Upbound Universal Crossplane - Upbound's official enterprise-grade distribution of Crossplane.
KubeVPN - Tunnel tools which can connect to Kubernetes cluster network.
Otterize intents operator - Manage network policies and Kafka ACLs in a Kubernetes cluster with ease.
nos - Module to Automatically maximize the utilization of GPU resources in a Kubernetes cluster.
kubenix - Kubernetes management with Nix.
KHole - Simple operator to alert on broken Kubernetes pods.
Timoni - Package manager for Kubernetes, powered by CUE and inspired by Helm.
Moving from Kubernetes to Podman (2023)
VolSync - Asynchronous data replication for Kubernetes volumes.
kubectl-count - Count resources by kind.
OWASP Kubernetes Top 10 (2023)
Kubewatch - Watch k8s events and trigger Handlers.
Pluto - CLI tool to help discover deprecated apiVersions in Kubernetes.
Elastic Cloud on Kubernetes (ECK)
Kubernetes Cluster Hetzner API Provider - Provides a consistent deployment and day 2 operations of "self-managed" Kubernetes clusters on Hetzner.
One Chart - Generic Helm chart for your application deployments.
Community Images - kubectl plugin that displays images running in a Kubernetes cluster that were pulled from community owned repositories and warn the user to switch repositories if needed.
KWOK: Kubernetes WithOut Kubelet (2023) (HN)
ArgoCD Plugin running Nix flakes apps
Iter8 - Kubernetes Release Optimizer.
Running Databases on Kubernetes (2023) (HN)
Spegel - Stateless cluster local OCI registry mirror.
cri-tools - CLI and validation tools for Kubelet Container Runtime Interface (CRI).
Shift-left Network Topology Analyzer - Analyzes resource YAMLs of a Kubernetes-based application to extract the required connectivity between its workloads.
ktunnels - Kubernetes controller for port-forwarding from your machine to remote hosts via Envoy TCP proxy.
A brief guide to Kubernetes networking (2023) (HN)
n8n Helm Chart for Kubernetes - Kubernetes Helm chart for n8n a Workflow Automation Tool. Easily automate tasks across different services.
Awesome Kubernetes (K8s) Threat Detection
De-cloud and de-k8s – bringing our apps back home (2023) (HN)
k8sgpt - Tool for scanning your kubernetes clusters, diagnosing and triaging issues in simple english.
Kubernetes as a Dev Tool (2023)
Kubectl OpenAI plugin - Plugin to generate and apply Kubernetes manifests using OpenAI GPT.
Raspbernetes - Kubernetes cluster powered by GitOps with FluxCD.
Kubespider - Global resource download orchestration system, build your home download center.
Otterize network mapper - Zero-config tool that aims to be lightweight and doesn't require you to adapt anything in your cluster.
Comparing k3s with Kubernetes (2023)
VelaD - Lightweight KubeVela that runs as Daemon in single node with high availability.
Bifrost - Gateway API-driven management of network infrastructure across Kubernetes and cloud infrastructures.
Regatta - Distributed, eventually consistent key-value store built for Kubernetes.
KubeMarine - Management tool for Kubernetes cluster deployment and maintenance.
cnspec - Open source, cloud-native security and policy project.
Chisel Kubernetes Operator
specctl - CLI to convert Kubernetes specifications to ECS Fargate and vice-versa.
Nauticus - Simplifying Kubernetes cluster management with fully-managed Spaces.
KubeBlocks - Cloud-native data infrastructure.
Sveltos - Add-on controller manages Kubernetes add-ons in tens of clusters.
KubeAdmiral - Multi-cluster Kubernetes Orchestration.
yawol - Load Balancer solution for OpenStack, based on the Kubernetes controller pattern.
Hybridnet - Make underlay and overlay network can coexist, communicate, even be transformed purposefully.
Limitador - Generic rate-limiter written in Rust.
Helmsman - Helm Charts as Code.
k8s-insider - Zero-config way to access your kubernetes cluster network.
cdk8s - Define Kubernetes native apps and abstractions using object-oriented programming.
Bare-Metal Kubernetes, Part I: Talos on Hetzner (2023) (HN)