kgateway-dev / kgateway

The Cloud-Native API Gateway and AI Gateway

gilbertchen / duplicacy

A new generation cloud backup tool

psviderski / uncloud

A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes ✨

deckarep / golang-set

A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp.

wal-g / wal-g

Archival and Restoration for databases in the Cloud

dragonflyoss / dragonfly

Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.

dosco / graphjin

One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code

gruntwork-io / cloud-nuke

A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it

yunionio / cloudpods

An open-source cloud-native unified-cloud platform. 开源云原生融合云平台

krakend / krakend-ce

KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.

hashicorp / terraform-provider-google

Terraform Provider for Google Cloud Platform

absmach / magistrala

IoT Platform Framework

cloudnativelabs / kube-router

Kube-router, a turnkey solution for Kubernetes networking.

beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

sleeyax / burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

radius-project / radius

Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps.

liqotech / liqo

Enable dynamic and seamless Kubernetes multi-cluster topologies

specstoryai / getspecstory

Install our local first extensions for your favorite AI IDE or Terminal Agent. Process your histories into reusable skills with Lore. Sync your conversations to the cloud. File issues and requests.

sardanioss / httpcloak

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies.

GoogleCloudPlatform / buildpacks

Builders and buildpacks designed to run on Google Cloud's container platforms

DataDog / KubeHound

Tool for building Kubernetes attack paths

layou233 / NeverIdle

资源定期浪费，可用于 Oracle 甲骨文保活。

kanisterio / kanister

An extensible framework for application-level data management on Kubernetes, Kanister is a Cloud Native Computing Foundation sandbox project and was originally created by the Veeam Kasten team.

unitedrhino / things

基于Golang/go-zero的AIoT物联网平台与SaaS开发底座，融合AI智能体、RAG知识库、记忆和工具调用。支持多租户、多应用、项目管理、设备管理、物模型、场景联动、告警、组态及3D数字孪生。提供MQTT/CoAP/HTTP/TCP接入及阿里云、腾讯云、涂鸦云对接，支持MySQL/PostgreSQL。借助Skills/CLI快速开发，适用于智慧能源、楼宇、停车、家居、农业与工业。

aws / amazon-cloudwatch-agent

CloudWatch Agent enables you to collect and export host-level metrics and logs on instances running Linux or Windows server.

bytedance / vArmor

vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols — protecting workloads including AI Agents.

bealesh / neckbeard

Agent plugin that scaffolds tested, cost-honest cloud infrastructure from a versioned module catalog

stephrobert / feint

A local emulator of the Scaleway, Outscale and Exoscale APIs. Their own official CLIs drive it end to end, Terraform and OpenTofu drive two of the three — no cloud account, no cloud credentials, nothing billed.

codelocal-cloud / CodeLocal

The open-source Project Brain for AI coding. Connect ChatGPT, Codex, Claude and MCP-compatible agents to your projects, local tools and persistent knowledge. Fork it, build with it, and help shape the open AI development stack. 🧠⚡

context-labs / cloudflared-operator

Cloudflare Tunnel's K8s Operator

mitis-cloud / understudy

Best-effort high availability for single-replica Kubernetes workloads: no downtime from announced node disruptions (drains, upgrades, consolidation, spot reclaims) without a standing second replica.

xz-dev / AI-gateway

Reusable Docker Compose AI gateway with CLIProxyAPI, Sub2API, Apache APISIX, and Cloudflare Tunnel.

photoprism / photoprism

AI-Powered Photos App 🌈💎✨

pulumi / pulumi

Pulumi - Infrastructure as Code in any programming language 🚀

labring / sealos

Deploy real projects from GitHub or your AI coding agent, then keep them running with AI-powered operations.

gotify / server

A simple server for sending and receiving messages in real-time per WebSocket. (Includes a sleek web-ui)

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

thanos-io / thanos

Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project.

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

kubeshark / kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

linkerd / linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

siderolabs / talos

Talos Linux is a modern Linux distribution built for Kubernetes.

loft-sh / vcluster

vCluster creates tenant clusters: fully isolated environments delivered as managed Kubernetes, or as the foundation for Slurm, Ray, Run:ai and inference clusters. Each gets its own API server, CRDs and RBAC, and runs on an existing cluster or standalone on bare metal. CNCF Certified Kubernetes.

TykTechnologies / tyk

Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol)

moby / buildkit

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

kubernetes-sigs / external-dns

Configure external DNS servers dynamically from Kubernetes resources

fission / fission

Fast and Simple Serverless Functions for Kubernetes

linuxkit / linuxkit

A toolkit for building secure, portable and lean operating systems for containers

cloudwego / kitex

Go RPC framework with high-performance and strong-extensibility for building micro-services.

turbot / steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

chaos-mesh / chaos-mesh

A Chaos Engineering Platform for Kubernetes.

projectcalico / calico

Cloud native networking and network security

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

nats-io / nats.go

Golang client for NATS, the cloud native messaging system.

cloudquery / cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

lxc / incus

Powerful system container and virtual machine manager

volcano-sh / volcano

A Cloud Native Batch System (Project under CNCF)

easegress-io / easegress

A Cloud Native traffic orchestration system. (CNCF Project)

litmuschaos / litmus

Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is at https://hackmd.io/a4Zu_sH4TZGeih-xCimi3Q

karmada-io / karmada

Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration