agent-substrate / substrate

Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

agentgateway / agentgateway

Open source proxy that routes and secures agent-to-LLM, agent-to-tool, and agent-to-agent traffic using MCP and A2A protocols.

llm-d / llm-d

State of the art inference performance with modern accelerators on Kubernetes

dsx-ai-factory / run-ai

Run:ai is the AI workload orchestration platform for Kubernetes. This monorepo contains the control plane services, in-cluster Kubernetes operator/controllers, shared libraries and clients, the installer, and the local dev environment.

opensandbox-group / OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

seaweedfs / seaweedfs

Distributed file and object storage system that serves S3, POSIX file system, and Iceberg/Lance table access from one Go binary.

pranshuparmar / witr

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

Agents365-ai / drawio-skill

Agent skill that turns natural language, code, Terraform/K8s, SQL, OpenAPI, AsyncAPI, Protobuf and GraphQL sources into editable, tested draw.io architecture diagrams: incremental sync, multi-view projection, drift diff, CI architecture tests, whiteboard derasterize, interactive HTML/PPTX/Mermaid exports.

kubernetes-sigs / agent-sandbox

agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).

glincker / levelrail

Free, self-hosted alternative to Vercel, Heroku, Railway, Coolify and Dokku. Push to git, get HTTPS, logs, metrics and one-click rollback on your own servers. One Go binary, no Kubernetes.

caoyingjunz / pixiu

Pixiu is an open source container platform for cloud-native application management.

netdata / netdata

The fastest path to AI-powered full stack observability, even for lean teams.

k3s-io / k3s

Lightweight Kubernetes

abiosoft / colima

Container runtimes on macOS (and Linux) with minimal setup

cilium / cilium

eBPF-based Networking, Security, and Observability

kata-containers / kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

vllm-project / semantic-router

An open, programmable decision layer for models and compute.

productdevbook / port-killer

A powerful cross-platform port management tool for developers. Monitor ports, manage Kubernetes port forwards, integrate Cloudflare Tunnels, and kill processes with one click.

Project-HAMi / HAMi

Heterogeneous GPU Sharing on Kubernetes

techiescamp / cka-certification-guide

This comprehensive CKA learning path repo equips aspiring Kubernetes administrators with all the knowledge and resources to ace the CKA exam on the first try. Includes in-depth explanations, hands-on labs, and valuable study materials. Pass the CKA and unlock your Kubernetes potential today!

neural-maze / production-ocr-course

Build, deploy, and scale a production-grade OCR pipeline using Rust, vLLM, Redis, KEDA, and Kubernetes.

podman-container-tools / podman

Podman: A tool for managing OCI containers and pods.

Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes

xpipe-io / xpipe

Access your entire server infrastructure from your local desktop

google / ax

Declarative Kubernetes-style orchestrator that runs sandboxed autonomous agent tasks on Agent Substrate, with workspaces and model specs.

rcourtman / Pulse

Real-time monitoring dashboard for Proxmox VE, PBS, Docker, Kubernetes, TrueNAS and vSphere. Self-hosted, with smart alerts and AI patrols that catch silent failures.

skyhook-io / radar

The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.

Augani / dory

Dory is the complete local development system for Apple Silicon: Docker, Compose, Kubernetes, virtual machines, and policy-bound agent sandboxes.

ongridio / ongrid

An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.

go-taas / go-taas

Open-source Token as a Service (TaaS) platform on Kubernetes — deploy LLMs, price by model × GPU, and meter/bill usage via an OpenAI-compatible API.

llm-d / llm-d-router

llm-d Router: The intelligent entry point for inference requests

traefik / traefik

The Cloud Native Application Proxy

goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

google / gvisor

Application Kernel for Containers

DataTalksClub / machine-learning-zoomcamp

A free, cohort-based course teaching ML engineering: training models, exposing them via APIs, and deploying with Docker, Kubernetes, and AWS Lambda.

cloudnative-pg / cloudnative-pg

The most popular Kubernetes Operator for PostgreSQL.

kubernetes / enhancements

Enhancements tracking repo for Kubernetes

kubeovn / kube-ovn

A Bridge between SDN and Cloud Native (Project under CNCF)

theagentrouter / agent-router

Manages Unified Access to Generative AI Services built on Envoy Gateway

ASCIT31 / Dark-Moon

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

etcd-io / etcd

Distributed reliable key-value store for the most critical data of a distributed system

istio / istio

Connect, secure, control, and observe services.

jumpserver / jumpserver

JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.

yeasy / docker_practice

最新Docker容器技术，从真实案例中学习最佳实践！| Learn and understand Docker&Container technologies, with real DevOps practice!

rancher / rancher

Complete container management platform

eip-work / kuboard-press

Kuboard v4 官方文档（zh/en 双语）：Kuboard 是基于 Kubernetes 的微服务管理界面。本仓库为 v4 版本文档站源码，涵盖安装升级、集群管理、工作负载、网络、存储、Kuboard MCP 等。

containerd / containerd

An open and reliable container runtime

vitessio / vitess

Vitess is a database clustering system for horizontal scaling of MySQL.

GoogleCloudPlatform / microservices-demo

Sample cloud-first application with 10 microservices showcasing Kubernetes, Istio, and gRPC.

crowdsecurity / crowdsec

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

crossplane / crossplane

The Cloud Native Control Plane

bunkerity / bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

hyperdxio / hyperdx

Resolve production issues, fast. An open source observability platform unifying session replays, logs, metrics, traces and errors powered by ClickHouse and OpenTelemetry.

databasus / databasus

PostgreSQL backup tool with Point-In-Time-Recovery and restore verification

ai-dynamo / dynamo

A Datacenter Scale Distributed Inference Serving Framework

warp-tech / warpgate

Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software

podman-desktop / podman-desktop

Podman Desktop is the best free and open source tool to work with Containers and Kubernetes for developers. Get an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from your desktop.

kubernetes-sigs / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible