awesome-cloud-native

Admiral provides automatic configuration generation, syncing and service discovery for multicluster Istio service mesh.

Apollo（阿波罗）是携程框架部门研发的分布式配置中心，能够集中化管理应用不同环境、不同集群的配置，配置修改后能够实时推送到应用端，并且具备规范的权限、流程治理等特性，适用于微服务配置管理场景。

Clusterpedia is used for complex resource searches across multiple clusters, support simultaneous search of a single kind of resource or multiple kinds of resources existing in multiple clusters.

Manage local application configuration files using templates and data from etcd or consul.

CoreDNS is a DNS server that chains middleware.

AWS Service registry for resilient mid-tier load balancing and failover.

Manage any layer 7 traffic in an Istio service mesh.

Content and Version-based Routing Fabric for Polyglot Microservices.

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

A service mesh implementation for connecting, control, and observe services in spring-cloud.

Kubernetes admission policies for OPA/Rego, Kyverno, and sigstore policy-controller that admit or refuse a workload on the in-toto agent execution evidence attached to its image.

Conformance vectors and a reference Go verifier for in-toto attestations of AI agent execution, plus SCITT/COSE carriage vectors that keep their own checker until the verifier reads them.

AppArmor is an effective and easy-to-use Linux application security system.

A tool for using AWS IAM credentials to authenticate to a Kubernetes cluster.

Next-gen behavior analysis server (think Mixpanel, Google Analytics) with built-in encryption.

CLI tool for running coding agents inside hardware-isolated microVMs with workspace snapshot isolation and egress control.

Kubernetes-native operator that manages isolated, persistent sandboxes for human developers and AI agents through Sandbox CRDs, with built-in governance, warm-pod pool, and a streaming agent-mode REST API.

A Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.

A GitOps Operator for Kubernetes.

An API Blueprint renderer with theme support that outputs static HTML.

Mock Server that implements the API Blueprint specification.

Dedicated Game Server Hosting and Scaling for Multiplayer Games on Kubernetes.

An open and reliable container runtime.

Containerd shims for running WebAssembly workloads in Kubernetes.

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface.

A fast and lightweight fully featured OCI runtime and C library for running containers.

Self-hosted sandbox runtime for AI agents with isolated Docker containers, cgroup v2 memory management, and dynamic pressure monitoring.

A Kubernetes Resource Interface for the Edge.

Extend cloud computing, data and service seamlessly to edge devices.

Open source system for managing containerized applications in IoT device.

Intelligent Resources Orchestrator for Kubernetes by using machine learning.

Open source tools for building custom schedulers on Amazon ECS.

Kubernetes Cluster Autoscaler for dynamic node scaling across cloud providers.

Define and run multi-container applications with Docker.

Conductor is a microservices orchestration engine.

Datacenter Operating System.