Open source. Open possibilities.

Sealed Secrets encrypts Kubernetes Secrets into SealedSecret resources that are safe to store in Git. Only the in-cluster controller can decrypt them, keeping secret contents hidden outside the cluster.

Krkn Operator is a Kubernetes-native platform for centralized multi-cluster chaos engineering, enabling teams to orchestrate and manage chaos experiments across Kubernetes and OpenShift clusters from a single control plane.

DevPod is a client-only, open-source tool for creating reproducible dev environments via devcontainer.json on any backend—local Docker, remote machines, Kubernetes, or cloud VMs—working with any IDE.

Checkov is an open-source static analysis tool that scans infrastructure-as-code files and container images for security misconfigurations and vulnerabilities, supporting Terraform, CloudFormation, Kubernetes, Dockerfile, and more with over 1000 built-in policies.

Sealos is an AI-native cloud operating system built on Kubernetes that unifies cloud IDE development, one-click app deployment, managed databases, and multi-tenant workspace isolation for running modern AI and SaaS workloads.

A large open-source collection of 2624 DevOps and SRE interview questions and hands-on exercises spanning Linux, Kubernetes, Terraform, AWS, Azure, GCP, Docker, Ansible, CI/CD, networking, databases, observability, and more.

Traefik is a modern HTTP reverse proxy and load balancer designed to simplify the deployment of microservices through automatic and dynamic configuration.

Canonical's lightweight, single-package Kubernetes that installs via snap on 42 Linux flavours for workstations, IoT, edge and CI/CD, with one-command add-ons like DNS, dashboard, Istio and Prometheus.

Flannel is a simple Layer 3 network fabric designed for Kubernetes and Docker. It allocates subnet leases to hosts and forwards packets using backends like VXLAN or cloud integrations, providing essential container networking infrastructure.

Cilium is an eBPF-based networking, security, and observability solution for Kubernetes. It offers CNI networking, identity-based L3-L7 policies, distributed load balancing that can replace kube-proxy, multi-cluster Cluster Mesh, service mesh with mutual authentication, and Hubble observability. It is a CNCF Graduated project with Apache 2.0-licensed user space code.

Falco is a cloud‑native runtime security tool for Linux that monitors kernel events and container activity, detects anomalies, and alerts on potential threats using customizable rules. It integrates with SIEMs and Kubernetes.

Portainer is a lightweight service delivery platform providing a GUI and API to manage Docker, Swarm, Kubernetes, and ACI environments.

Prometheus Operator is a Kubernetes-native tool that automates the deployment, configuration, and management of Prometheus monitoring clusters, Alertmanager, and related components using custom resources.

A curated collection of single-file cheatsheets covering popular programming languages, backend and frontend frameworks, databases, and development tools, with a website directory and open contribution via pull requests.

Trivy is a comprehensive security scanner used to detect vulnerabilities, misconfigurations, secrets, and SBOMs across various targets including containers, Kubernetes, and code repositories.

Fission is an open-source, Kubernetes-native serverless framework for deploying and managing functions and applications on Kubernetes. It supports multiple languages, offers fast cold starts (~100ms), and enables automatic scaling.

kubectx and kubens are kubectl power tools that let you quickly switch between Kubernetes clusters (contexts) and namespaces, with tab completion, fzf interactive selection, and read-only shell modes.

Podman is a daemonless tool for managing OCI containers and pods, supporting rootless operation and Docker-compatible CLI.

minikube is a tool that implements a local Kubernetes cluster on macOS, Linux, and Windows, designed for local application development.

Harbor is an open-source, CNCF-hosted cloud-native registry used to store, sign, and scan container images and Helm charts.