kubernetes / kubernetes

Open source system for deploying, scaling, and managing containerized applications across clusters of hosts.

aquasecurity / trivy

Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.

llm-d / llm-d

State of the art inference performance with modern accelerators on Kubernetes

agent-substrate / substrate

Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.

agentgateway / agentgateway

Open source proxy that routes and secures agent-to-LLM, agent-to-tool, and agent-to-agent traffic using MCP and A2A protocols.

opensandbox-group / OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

seaweedfs / seaweedfs

Distributed file and object storage system that serves S3, POSIX file system, and Iceberg/Lance table access from one Go binary.

Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

abiosoft / colima

Container runtimes on macOS (and Linux) with minimal setup

Agents365-ai / drawio-skill

Agent skill that turns natural language, code, Terraform/K8s, SQL, OpenAPI, AsyncAPI, Protobuf and GraphQL sources into editable, tested draw.io architecture diagrams: incremental sync, multi-view projection, drift diff, CI architecture tests, whiteboard derasterize, interactive HTML/PPTX/Mermaid exports.

dsx-ai-factory / run-ai

Run:ai is the AI workload orchestration platform for Kubernetes. This monorepo contains the control plane services, in-cluster Kubernetes operator/controllers, shared libraries and clients, the installer, and the local dev environment.

Project-HAMi / HAMi

Heterogeneous GPU Sharing on Kubernetes

google / ax

Declarative Kubernetes-style orchestrator that runs sandboxed autonomous agent tasks on Agent Substrate, with workspaces and model specs.

pranshuparmar / witr

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

etcd-io / etcd

Distributed, Raft-replicated key-value store that serves as a reliable configuration and coordination backend for clusters.

traefik / traefik

The Cloud Native Application Proxy

DefectDojo / django-DefectDojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

goauthentik / authentik

The authentication glue you need.

netdata / netdata

The fastest path to AI-powered full stack observability, even for lean teams.

kubernetes-sigs / agent-sandbox

agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).

crowdsecurity / crowdsec

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

ai-dynamo / dynamo

A Datacenter Scale Distributed Inference Serving Framework

google / gvisor

Application Kernel for Containers

ys-ll / uniterm

All-in-one terminal covering 30+ protocols — SSH, RDP, SFTP, databases, Kubernetes and more. With a built-in AI Agent that runs multi-turn shell commands autonomously.

theagentrouter / agent-router

Manages Unified Access to Generative AI Services built on Envoy Gateway

go-taas / go-taas

Open-source Token as a Service (TaaS) platform on Kubernetes — deploy LLMs, price by model × GPU, and meter/bill usage via an OpenAI-compatible API.

rcourtman / Pulse

Real-time monitoring dashboard for Proxmox VE, PBS, Docker, Kubernetes, TrueNAS and vSphere. Self-hosted, with alerts for failed backups, full disks, unhealthy containers and offline nodes.

HolmesGPT / holmesgpt

SRE Agent - CNCF Sandbox Project

NeptuneHub / AudioMuse-AI

AudioMuse-AI uses sonic analysis to rediscover forgotten songs, uncover hidden connections in your music library, and generate intelligent playlists for Navidrome, Jellyfin, LMS, Lyrion, Emby and Plex: no metadata or external services required.

cilium / cilium

eBPF-based networking, security, and observability layer for Kubernetes and other container platforms.

ongridio / ongrid

An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.

glincker / levelrail

Free, self-hosted alternative to Vercel, Heroku, Railway, Coolify and Dokku. Push to git, get HTTPS, logs, metrics and one-click rollback on your own servers. One Go binary, no Kubernetes.

hulinkang9527 / mcctl

麦当劳中国 MCP 的命令行控制面：33 个官方 MCP 工具编排成 kubectl 式 CLI（人格测试/配餐/省钱/下单/积分）+ 麦麦派对策划师 + WorkBuddy Skill + 网页 Playground

goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes

skyhook-io / radar

The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.

freelensapp / freelens

Free IDE for Kubernetes

selkies-project / selkies

Low-Latency Accelerated Web Remote Desktop Streaming Platform for Self-Hosting, Containers, Kubernetes, or Cloud/HPC

Rocky-true / vmware-to-kubernetes

Kubernetes 自动化运维与迁移工具：阿里云 3 主 HA、Compose→K8s、Terraform、Kubekey、部署验证与故障排查。Kubernetes automation, migration and ops toolkit.

podman-container-tools / podman

Podman: A tool for managing OCI containers and pods.

totoshko88 / RustConn

Modern cross-platform connection manager — SSH, RDP, VNC, SPICE, MOSH, Telnet, Serial, Kubernetes and Zero Trust — with a GTK4/libadwaita interface and embedded Rust clients. Linux, macOS, FreeBSD, Windows (WSLg).

jumpserver / jumpserver

JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.

meshery / meshery

Meshery, the cloud native manager

databasus / databasus

PostgreSQL backup tool with Point-In-Time-Recovery and restore verification

vllm-project / semantic-router

An open, programmable decision layer for models and compute.

iflytek / skillhub

Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.

DataTalksClub / machine-learning-zoomcamp

A free, cohort-based course teaching ML engineering: training models, exposing them via APIs, and deploying with Docker, Kubernetes, and AWS Lambda.

kata-containers / kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

ASCIT31 / Dark-Moon

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

helm / helm

Helm is a package manager that installs and manages Kubernetes applications as versioned, templated packages called Charts.

portainer / portainer

Making Docker and Kubernetes management easy.

bunkerity / bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

kai-scheduler / KAI-Scheduler

KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale

VersusControl / versus-incident

The self-hosted AI SRE agent. You don't have to monitor your systems alone. Versus Incident will keep track of your services, applications, and systems, detect new or unexpected problems, and provide your team with the evidence needed to investigate.

modelsphere / modelsphere

ModelSphere is an open-source LLM inference infrastructure designed to make production-grade model serving simple, efficient, and continuously optimized.

agentshield-dev / agentshield

Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.

learnk8s / resource-review-mixin

A Grafana and Prometheus mixin for reviewing Kubernetes resource usage, requests, limits, throttling, restarts, and OOM events—built as a companion to the Kubernetes Rightsizing book.

psviderski / uncloud

A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes ✨

IBM / mcp-context-forge

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.