CNCF Atlas

English

日本語

English

日本語

Appearance

Catalog ​

Every CNCF project, plus a few independent ones, grouped into lines by what they do. The marker on each stop shows CNCF maturity. Bold names open a deep-dive on this site; the rest open their upstream repository.

OROrchestration & Scheduling28

  1. KEDAEvent-driven autoscaling for Kubernetes, including scale-to-zero, by feeding external events into the HPA.Graduated
  2. KnativeRuns containers as request-driven serverless workloads on Kubernetes, including scale to zero.Graduated
  3. KubeEdgeExtends a Kubernetes control plane to edge nodes and IoT devices over unreliable networks.Graduated
  4. KubernetesRun containers across many machines by declaring desired state; controllers drive the cluster toward it.Graduated
  5. KarmadaKubernetes-native control plane that propagates and schedules workloads across many clusters and clouds.Incubating
  6. KubeVirtRun and manage KVM virtual machines as first-class Kubernetes workloads.Incubating
  7. OpenKruiseKubernetes controllers that extend the standard workloads and update container images in place without recreating Pods.Incubating
  8. OpenYurtExtend a vanilla Kubernetes control plane to edge nodes with offline autonomy, keeping the upstream API intact.Incubating
  9. VolcanoA Kubernetes-native batch scheduler that adds gang scheduling, queues, and fair-share to clusters running AI, ML, and big-data workloads.Incubating
  10. AgonesHost, run, and scale dedicated multiplayer game servers on Kubernetes using custom resources and controllers.Sandbox
  11. AkriDiscovers edge leaf devices (cameras, USB, OPC UA) and exposes them to Kubernetes as schedulable resources.Sandbox
  12. ArmadaA high-throughput batch job scheduler that queues and schedules work across many Kubernetes clusters from outside the clusters themselves.Sandbox
  13. Cadence WorkflowA fault-tolerant, code-first orchestration engine that runs long-lived workflows and resumes them from event history after any crash.Sandbox
  14. ClusternetA Kubernetes addon that manages many child clusters from one parent cluster, so you reach, deploy to, and coordinate them through a single entry point.Sandbox
  15. ClusterpediaSyncs the resources of many Kubernetes clusters into one relational database and serves them back as an Aggregated API, so kubectl can search every cluster at once.Sandbox
  16. CoHDIA Kubernetes operator that attaches and detaches GPUs to nodes at runtime by driving a Composable Device Infrastructure fabric API.Sandbox
  17. k0sA single-binary Kubernetes distribution with no host OS dependencies, aimed at bare metal, VMs, and edge.Sandbox
  18. k3sA lightweight Kubernetes distribution packaged as one binary, trimmed down for edge, IoT, and CI.Sandbox
  19. kcpA Kubernetes-style control plane that serves many logical clusters, decoupled from running containers at all.Sandbox
  20. KoordinatorCo-locates latency-sensitive services and batch jobs on the same nodes using QoS classes and resource reclamation.Sandbox
  21. KubeFleetPlaces and propagates workloads across a fleet of Kubernetes clusters from a single hub cluster.Sandbox
  22. KubeSliceJoins namespaces across clusters into one flat network slice with its own gateways and policies.Sandbox
  23. KubeStellarDistributes Kubernetes objects from a central hub to many clusters, for edge, multi-cloud, and hybrid fleets.Sandbox
  24. KuredReboots Kubernetes nodes safely, one at a time, when the OS package manager signals that a reboot is pending.Sandbox
  25. Open Cluster ManagementA hub and spoke standard for registering many Kubernetes clusters and shipping work out to them.Sandbox
  26. OpenFunctionA function-as-a-service platform that builds functions into images and runs them on Knative or KEDA.Sandbox
  27. OxiaA scalable metadata store and coordination service, built to replace ZooKeeper-style dependencies.Sandbox
  28. SlimFaaSA small function-as-a-service runtime for Kubernetes with scale to zero and no external dependencies.Sandbox

PIProvisioning & Infrastructure8

  1. CrossplaneA Kubernetes control-plane framework: define your own APIs and reconcile cloud and in-cluster resources.Graduated
  2. metal3-ioKubernetes-native bare metal host provisioning that drives OpenStack Ironic through the BareMetalHost CRD.Incubating
  3. KairosTurns any Linux distribution into an immutable, atomically upgradable OS image for edge Kubernetes nodes.Sandbox
  4. KubeanCluster lifecycle management built on Kubespray, driven entirely by Kubernetes custom resources.Sandbox
  5. KubeClipperInstalls and manages the lifecycle of Kubernetes clusters on existing hosts, through a web console and an API.Sandbox
  6. NMstateDeclarative host network configuration, applied on nodes through a Kubernetes operator or a local command line tool.Sandbox
  7. OpenTofuAn open source infrastructure as code tool, forked from Terraform and governed by the community.Sandbox
  8. TinkerbellProvisions bare metal machines: network and ISO boot, BMC control, a metadata service, and a workflow engine.Sandbox

SMService Mesh & Networking20

  1. CiliumeBPF-based networking, security, and observability for Kubernetes, with policy written against workload identity.Graduated
  2. CoreDNSA DNS server that resolves each query through a configured chain of plugins; the default Kubernetes cluster DNS.Graduated
  3. EnvoyAn out-of-process L4/L7 proxy and universal data plane for polyglot microservices.Graduated
  4. IstioA service mesh that puts a programmable proxy next to every workload, moving traffic, mTLS, and telemetry out of app code.Graduated
  5. LinkerdA Kubernetes service mesh adding mTLS, metrics, and reliability through a lightweight Rust sidecar proxy.Graduated
  6. Container Network Interface (CNI)A minimal, runtime-agnostic spec plus Go libraries that let any container runtime hand pod networking to pluggable executables.Incubating
  7. k8gbGlobal load balancing across Kubernetes clusters, built out of DNS delegation and CoreDNS instead of an appliance or a control plane.Incubating
  8. Aeraki MeshA control plane that extends Istio to manage non-HTTP layer-7 protocols like Dubbo, Thrift, and Kafka in a service mesh.Sandbox
  9. AntreaA Kubernetes-native CNI that uses Open vSwitch as its data plane to provide pod networking and NetworkPolicy.Sandbox
  10. KmeshA service mesh data plane that moves traffic management into the kernel with eBPF, avoiding a per-pod sidecar.Sandbox
  11. Kube-OVNBrings OVN and Open vSwitch networking to Kubernetes, adding subnets, VPCs, QoS, and traffic mirroring.Sandbox
  12. kube-vipProvides a virtual IP for the control plane and load balancer addresses for services, with no cloud dependency.Sandbox
  13. KumaAn Envoy-based service mesh that covers both Kubernetes and plain VMs from a single control plane.Sandbox
  14. LoxiLBAn eBPF load balancer for Kubernetes, edge, and 5G that handles cluster services and external traffic alike.Sandbox
  15. MetalLBGives LoadBalancer services a real IP on bare metal clusters, announced over ARP or BGP.Sandbox
  16. Network Service MeshConnects workloads across clusters and clouds into on-demand virtual L3 networks, independent of the CNI in use.Sandbox
  17. OVN-KubernetesA CNI plugin that implements Kubernetes networking on top of OVN, shipped by several Kubernetes distributions.Sandbox
  18. SermantA proxyless service mesh for Java that injects traffic governance through a Java agent instead of a sidecar.Sandbox
  19. SpiderpoolIP address management for underlay and RDMA networking on bare metal, virtual machines, and public cloud.Sandbox
  20. SubmarinerConnects pods and services across Kubernetes clusters with encrypted tunnels and cross-cluster service discovery.Sandbox

GWAPI Gateway7

  1. ContourA Kubernetes ingress controller that programs Envoy as its data plane, translating Ingress, its HTTPProxy CRD, and Gateway API into live Envoy config over xDS.Incubating
  2. Emissary-IngressKubernetes-native API gateway and ingress built on Envoy Proxy, driven entirely by CRDs.Incubating
  3. BFEA Go layer-7 load balancer and reverse proxy from Baidu, with content-based routing via a human-readable condition DSL and two-stage GSLB/SLB load balancing.Sandbox
  4. EasegressA Go traffic gateway with a result-driven filter pipeline and embedded etcd for self-contained HA.Sandbox
  5. HigressAn API gateway that embeds a forked Istio Pilot to turn Ingress and nginx annotations into Envoy config, with a Wasm plugin layer for AI and traffic.Sandbox
  6. KgatewayAn Envoy-powered Kubernetes gateway that implements Gateway API, with a control plane for routing and policy.Sandbox
  7. KuadrantAdds rate limiting, authentication, and DNS policy on top of Gateway API gateways such as Istio and Envoy Gateway.Sandbox

OBObservability16

  1. FluentdA unified logging layer that collects events, routes them by tag, buffers, and ships them to many destinations.Graduated
  2. JaegerA distributed tracing platform; in v2 it ships as an OpenTelemetry Collector distribution.Graduated
  3. OpenTelemetryA vendor-neutral standard and toolchain for generating, collecting, and exporting traces, metrics, and logs.Graduated
  4. PrometheusMetrics-based monitoring that pulls time series over HTTP, stores them in a local TSDB, and queries with PromQL.Graduated
  5. CortexA horizontally scalable, multi-tenant, long-term storage backend for Prometheus that receives metrics over remote write.Incubating
  6. OpenCostVendor-neutral CNCF spec and engine for real-time Kubernetes and cloud cost allocation.Incubating
  7. ThanosExtends Prometheus with object-storage long-term retention and a single global query view across many servers.Incubating
  8. HolmesGPTAn AI agent that investigates production incidents by driving read-only observability tools through a controlled LLM loop.Sandbox
  9. Inspektor GadgetA collection of eBPF gadgets that trace syscalls, network, and file activity on Linux and map every event back to a pod.Sandbox
  10. K8sGPTScans a cluster for broken resources and explains each problem in plain language, optionally through an LLM.Sandbox
  11. KeplerEstimates per-pod and per-node energy use from eBPF probes and hardware counters, exported as Prometheus metrics.Sandbox
  12. KuberhealthyRuns synthetic checks as pods, so monitoring reports whether the cluster actually works rather than whether it is up.Sandbox
  13. Logging Operator (Kube Logging)Manages Fluent Bit and Fluentd log pipelines on Kubernetes from custom resources, configurable per namespace.Sandbox
  14. PersesA dashboard tool for Prometheus, Thanos, and Jaeger data, with dashboards defined as versionable resources.Sandbox
  15. PixieInstruments a cluster with eBPF and answers questions about traffic, requests, and performance without code changes.Sandbox
  16. TricksterAn HTTP reverse proxy and cache for time series databases that serves dashboard queries from a delta cache.Sandbox

SCSecurity & Compliance17

  1. cert-managerIssues and renews X.509 certificates from ACME, Vault, Venafi, and private CAs as native Kubernetes resources.Graduated
  2. FalcoA runtime security engine that watches Linux kernel events and alerts when activity matches a rule.Graduated
  3. KyvernoA Kubernetes admission engine where each policy is itself a Kubernetes resource written as YAML.Graduated
  4. Cloud CustodianA YAML policy engine for cloud governance that queries resources, filters them, and runs actions like tagging, stopping, or deleting, so rules live as code instead of ad hoc scripts.Incubating
  5. Confidential ContainersRun unmodified Kubernetes Pods inside confidential VMs and release secrets only to workloads that pass remote attestation.Incubating
  6. KubescapeOpen-source Kubernetes security platform for misconfiguration, vulnerability, and runtime scanning from IDE to running cluster.Incubating
  7. Bank-VaultsAutomates initializing, unsealing, and configuring HashiCorp Vault, keeping unseal keys encrypted with cloud KMS for Kubernetes.Sandbox
  8. CartographyPulls cloud and SaaS assets and the relationships between them into a Neo4j graph so you can query exposure and access paths with Cypher.Sandbox
  9. CopaceticPatches known OS-package vulnerabilities into an existing container image as an additive layer, driven by a scanner report, without a rebuild.Sandbox
  10. EraserDeletes vulnerable and unwanted container images from every Kubernetes node, never touching images a running container uses.Sandbox
  11. External Secrets OperatorSyncs secrets from external managers like AWS, Vault, and GCP into native Kubernetes Secrets.Sandbox
  12. KeylimeRemote attestation for machines using TPM measured boot, with continuous runtime integrity monitoring.Sandbox
  13. KubeArmorRestricts what a pod may execute, read, and reach at runtime, enforced through LSMs such as AppArmor and BPF-LSM.Sandbox
  14. OSCAL-COMPASSTools for authoring, validating, and governing compliance documents in the NIST OSCAL format.Sandbox
  15. ParsecA platform abstraction that lets applications use a machine's hardware security features through one API.Sandbox
  16. SlimToolkitInspects a container image at runtime and rebuilds it with only the files the application actually uses.Sandbox
  17. SOPSEncrypts the values inside YAML, JSON, and env files with KMS, age, or PGP, leaving the structure readable in git.Sandbox

IDIdentity & Policy18

  1. Open Policy Agent (OPA)A general-purpose policy engine that decouples authorization from app code, evaluated via the Rego language.Graduated
  2. SPIFFEStandards for giving workloads a short-lived, cryptographically verifiable identity without pre-shared secrets.Graduated
  3. SPIREIssues short-lived, attested workload identities (X509-SVID and JWT-SVID); the SPIFFE reference implementation.Graduated
  4. KeycloakOpen-source identity and access management server speaking OIDC, OAuth 2.0, and SAML for apps and services.Incubating
  5. OpenFGAZanzibar-style fine-grained authorization from relationship tuples and a declarative modelIncubating
  6. AutheliaSSO and 2FA for your reverse proxy, plus an OpenID Connect providerNot in CNCF
  7. authentikA self-hosted identity provider: SSO, OAuth2/OIDC, SAML, and LDAP with a visual flow editorNot in CNCF
  8. PermifyA Zanzibar-style authorization engine backed by relation tuples in PostgreSQLNot in CNCF
  9. SpiceDBA Zanzibar-inspired permissions database that answers checks by traversing a relationship graphNot in CNCF
  10. ZITADELAPI-first, event-sourced identity platform with multi-tenancy built inNot in CNCF
  11. AthenzX.509 service identity and fine-grained RBAC for dynamic, hybrid-cloud infrastructure.Sandbox
  12. CapsuleSoft multi-tenancy for Kubernetes: group namespaces under a Tenant CRD and enforce isolation with admission webhooks.Sandbox
  13. CedarA policy language and evaluation engine for fine-grained authorization, designed so policies can be analyzed statically and the engine itself formally verified.Sandbox
  14. DexA federated OpenID Connect provider that delegates login to upstream identity providers like LDAP, SAML, GitHub, and Google.Sandbox
  15. KubewardenA Kubernetes policy engine whose admission policies compile to WebAssembly, written in CEL, Rego, Rust, or Go.Sandbox
  16. OAuth2 ProxyA reverse proxy that puts OAuth2/OIDC login in front of a service that has noneSandbox
  17. ParalusControlled and audited access to Kubernetes clusters, with short-lived credentials issued per user and role.Sandbox
  18. TokenetesIssues and verifies Transaction Tokens so a call chain carries immutable identity and context between services.Sandbox

SUSupply Chain9

  1. HarborAn OCI registry that adds RBAC, vulnerability scanning, replication, and signature verification.Graduated
  2. in-totoVerifies every step of a software supply chain was done as planned by authorized partiesGraduated
  3. The Update Framework (TUF)Secures software update systems so a compromised repo or key cannot push malicious updatesGraduated
  4. Notary ProjectSign and verify OCI artifacts with X.509 PKI, storing portable signatures as OCI Referrers next to the artifact.Incubating
  5. GUACAggregates software supply chain metadata into a queryable graphNot in CNCF
  6. DalecDeclarative YAML to native RPM/DEB packages and minimal, signed, SBOM-attested containers, using only Docker.Sandbox
  7. Open Policy ContainersBuilds, signs, tags, and distributes OPA policy bundles as OCI artifacts through any compliant registry.Sandbox
  8. ORASCLI and SDKs for pushing and pulling arbitrary artifacts, not only images, to and from OCI registries.Sandbox
  9. RatifyVerifies signatures, SBOMs, and other artifact metadata at admission time and rejects what fails policy.Sandbox

STStorage & Database20

  1. CubeFSA distributed file and object store that separates metadata from data, per-volume replication or erasure coding.Graduated
  2. etcdA distributed key-value store that uses Raft to keep a small, critical dataset consistent across a cluster.Graduated
  3. RookA Kubernetes operator that runs Ceph as declarative custom resources for block, file, and object storage.Graduated
  4. TiKVA distributed, transactional key-value database, the storage layer behind TiDB.Graduated
  5. VitessA clustering system that shards MySQL horizontally behind a single MySQL-compatible endpoint.Graduated
  6. FluidA Kubernetes operator that makes datasets a first-class resource and orchestrates distributed caches to speed up data access for AI and big-data workloads.Incubating
  7. LonghornKubernetes-native distributed block storage that gives every volume its own lightweight engine and replicas.Incubating
  8. CarinaA CSI driver that carves local node disks into volumes with LVM, built for databases that want raw local disk performance.Sandbox
  9. CloudNativePGA Kubernetes operator that runs PostgreSQL with high availability, using the Kubernetes API itself as the consensus store instead of etcd or Patroni.Sandbox
  10. composefsA read-only mountable filesystem that stores only metadata and shares file content from an external content-addressed store, with optional fs-verity sealing.Sandbox
  11. CurvineA Rust distributed cache across memory, SSD, and disk that fronts object storage behind POSIX, S3, and HDFS interfaces.Sandbox
  12. HwameiStorTurns the local disks on Kubernetes nodes into a highly available storage pool for stateful workloads.Sandbox
  13. K8upA backup operator for Kubernetes and OpenShift that schedules Restic backups of volumes and application data.Sandbox
  14. KanisterRuns application-aware backup and restore as Kubernetes Blueprints instead of generic volume snapshots.Sandbox
  15. OpenEBSContainer-native storage that builds persistent volumes out of the local and replicated disks a cluster already has.Sandbox
  16. OpenEverestProvisions and operates database clusters on any Kubernetes infrastructure, across several database engines.Sandbox
  17. openGeminiA distributed time series database built for high write concurrency and long-term storage of metrics.Sandbox
  18. Piraeus DatastoreRuns LINSTOR and DRBD on Kubernetes so pods get replicated block storage from node-local disks.Sandbox
  19. SchemaHeroDeclarative database schema migrations as Kubernetes custom resources, planned and applied by an operator.Sandbox
  20. VeleroBacks up, restores, and migrates Kubernetes cluster resources together with their persistent volumes.Sandbox

MSMessaging & Streaming5

  1. NATSHigh-performance, single-binary messaging for cloud and edge, with optional JetStream persistence.Incubating
  2. StrimziRun and operate Apache Kafka on Kubernetes through declarative custom resources and operators.Incubating
  3. Apicurio RegistryA runtime server that stores, versions, and validates API definitions and event schemas, with pluggable storage backends.Sandbox
  4. DrasiDetect changes across data sources with standing Cypher queries and fire reactions, without copying or polling the data.Sandbox
  5. TremorAn event processing runtime for unstructured data, with structural pattern matching for filtering and transformation.Sandbox

RTRuntime16

  1. containerdAn OCI-compliant container runtime daemon, the runtime layer beneath Kubernetes and Docker.Graduated
  2. CRI-OA lightweight, Kubernetes-only Container Runtime Interface implementation for running OCI containers.Graduated
  3. DragonflyPeer-to-peer distribution of container images, files, and AI models across large clusters.Graduated
  4. Flatcar Container LinuxA minimal, immutable Linux distribution for running containers, with A/B partitions and atomic automatic updates.Incubating
  5. LimaLinux virtual machines on macOS, Linux, and Windows with automatic file sharing and port forwarding.Incubating
  6. bootcTransactional, in-place operating system updates that ship the whole host as an OCI container image.Sandbox
  7. bpfmanAn eBPF program manager that loads, attaches, and tracks eBPF programs on a node so applications avoid privileged kernel access.Sandbox
  8. container2wasmConverts a container image into a WebAssembly image that runs on a WASI runtime or in a browser, by compiling a CPU emulator to Wasm and running a real Linux plus runc inside it.Sandbox
  9. HyperlightA library that runs each function call inside its own micro VM, giving untrusted guest code hardware isolation with a fast start.Sandbox
  10. Inclavare ContainersA confidential computing container runtime that starts workloads inside hardware enclaves.Sandbox
  11. InterlinkExecutes a Kubernetes pod on remote compute such as an HPC batch system, through a virtual kubelet provider.Sandbox
  12. KuasarA container runtime that hosts several sandbox types, microVM, Wasm, and application kernel, behind one containerd shim.Sandbox
  13. Podman Container ToolsThe daemonless container toolchain: Podman runs containers, Buildah builds images, Skopeo moves them between registries.Sandbox
  14. uruncA CRI-compatible runtime that runs unikernels and application kernels as if they were ordinary containers.Sandbox
  15. Virtual KubeletA kubelet implementation that registers a node backed by any API, so pods can land on serverless or external compute.Sandbox
  16. youkiAn OCI container runtime written in Rust, usable as a drop-in alternative to runc.Sandbox

WAWebAssembly4

  1. wasmCloudA WebAssembly component runtime that runs the same host locally and on Kubernetes, wiring components to swappable capability plugins.Incubating
  2. SpinA framework for building and deploying serverless applications compiled to WebAssembly.Sandbox
  3. SpinKubeRuns Spin WebAssembly applications on Kubernetes as first-class workloads, through a containerd shim and an operator.Sandbox
  4. WasmEdge RuntimeA WebAssembly runtime for cloud, edge, and embedded workloads, with host extensions for networking and inference.Sandbox

AIAI & Machine Learning10

  1. KubeflowOrchestrates end-to-end machine learning workflows on Kubernetes by compiling pipeline definitions into Argo Workflows and tracking every run in ML Metadata.Graduated
  2. HAMiShare one physical GPU across Kubernetes pods by memory and compute, with per-pod limits enforced at runtime and no application changes.Incubating
  3. KServeKubernetes-native, multi-framework inference platform that turns a model into an autoscaling InferenceService for both predictive and generative AI.Incubating
  4. Volcano-KthenaKubernetes-native LLM inference orchestration that pairs Volcano gang scheduling with KV-cache-aware, prefill-decode routing.Incubating
  5. kagentRuns AI agents inside Kubernetes for DevOps and platform work, with the agents themselves defined as custom resources.Sandbox
  6. KAI SchedulerA Kubernetes scheduler that allocates GPUs to AI workloads with queues, quotas, and fractional sharing.Sandbox
  7. KAITOAn operator that deploys and tunes open-weight language models on Kubernetes, provisioning GPU nodes as needed.Sandbox
  8. KitOpsPackages models, datasets, and code into one versioned OCI artifact, so ML projects ship like container images.Sandbox
  9. llm-dDistributed LLM inference on Kubernetes, built on vLLM and the Gateway API inference extension.Sandbox
  10. ModelPackAn open specification for packaging, distributing, and running AI artifacts in cloud native environments.Sandbox

CRContainer Registry2

  1. DistributionThe open-source registry that stores and serves container images, and the OCI Distribution core many registries build on.Sandbox
  2. zotAn OCI-native registry that stores images and artifacts with no extra services, from a laptop to production.Sandbox

CEChaos Engineering4

  1. Chaos MeshA Kubernetes-native chaos engineering platform that injects faults into pods, networks, filesystems, and the kernel through custom resources.Incubating
  2. LitmusCloud-native chaos engineering for Kubernetes, with a central control plane and a shared hub of reusable experiments.Incubating
  3. ChaosbladeA single command-line tool that injects faults across hosts, the JVM, C++, containers, and Kubernetes by dispatching versioned YAML experiment specs to per-domain executors.Sandbox
  4. KrknInjects failures into Kubernetes clusters and measures how the workloads and control plane hold up.Sandbox

DTDeveloper Tools18

  1. BackstageA framework for building developer portals: a software catalog, templates, and docs assembled into one internal application you own.Incubating
  2. gRPCA high-performance RPC framework that turns a Protocol Buffers service definition into typed clients and servers running over HTTP/2.Incubating
  3. MicrocksSpec-driven mock and contract-testing server: import an API artifact, get a live mock and contract tests from the same contract.Incubating
  4. OpenFeatureA vendor-neutral standard and reference daemon (flagd) for feature flag evaluation across any language and backend.Incubating
  5. Connect RPCA Protocol Buffers RPC framework that generates typed clients and servers on plain net/http, so one server speaks the Connect protocol, gRPC, and gRPC-Web at once.Sandbox
  6. ContainerSSHAn SSH server that boots a throwaway container for each connection and delegates authentication and per-connection configuration to external HTTP webhooks.Sandbox
  7. DevfileA YAML standard for cloud development workspaces, defined as Go types that generate every CRD, JSON schema, and TypeScript model.Sandbox
  8. DevSpaceA client-only CLI that runs your local code inside a Kubernetes pod and syncs edits both ways for in-cluster development.Sandbox
  9. HeadlampAn extensible web and desktop UI for Kubernetes that proxies every cluster API through its own backend and loads plugins at runtime.Sandbox
  10. koBuilds and pushes container images for Go programs without a Dockerfile or a running Docker daemon.Sandbox
  11. Kube-burnerDrives load against a Kubernetes API server and measures the result, for scale and performance testing.Sandbox
  12. kube-rsThe Rust client and controller runtime for Kubernetes: typed API access, watchers, and reconcilers.Sandbox
  13. KubeElastiScales workloads to zero and back by queueing incoming requests in a proxy until the pods are ready.Sandbox
  14. Podman DesktopA desktop application for building, running, and inspecting containers and Kubernetes workloads locally.Sandbox
  15. Runme NotebooksTurns Markdown runbooks into executable notebooks, so the documented commands are the ones that actually run.Sandbox
  16. Serverless DevsA CLI that develops and deploys serverless applications across cloud providers from one project definition.Sandbox
  17. TelepresenceRoutes traffic between a remote cluster and a local process, so a service can be debugged on a laptop.Sandbox
  18. Visual Studio Code Kubernetes ToolsThe VS Code extension for browsing clusters, editing manifests, and debugging workloads from the editor.Sandbox