rekcah78

KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

teler

Real-time HTTP Intrusion Detection

kr8s

A batteries-included Python client library for Kubernetes that feels familiar for folks who already know how to use kubectl

kusion

Declarative Intent Driven Platform Orchestrator for Internal Developer Platform (IDP).

terraform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

authentik

The authentication glue you need.

kepler

Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe performance counters and other system stats, use ML models to estimate workload energy consumption based on these stats, and exports them as Prometheus metrics

descheduler

Descheduler for Kubernetes

odigos

Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF

skan

Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.

kubelogin

kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)

policy-reporter

Monitoring and Observability Tool for the PolicyReport CRD with an optional UI.

candilibre

Un robot pour obtenir des places de permis sur le site candilib.

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

aws-incident-response

create-and-validate-acm-certificate

Creates an ACM certificate with DNS validation, creates the validation records directly in Route 53

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

x509-certificate-exporter

A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone

terraform-kubernetes-addons

Terraform module to deploy curated Kubernetes middlewares on multiple cloud providers.

golangci-lint

Fast linters runner for Go

netassert

Network security testing for Kubernetes DevSecOps workflows

powerfulseal

A powerful testing tool for Kubernetes clusters.

baremetal-operator

Bare metal host provisioning integration for Kubernetes

kube-no-trouble

Easily check your clusters for use of deprecated APIs

pvc-autoresizer

Auto-resize PersistentVolumeClaim objects based on Prometheus metrics

kotary

Managing Kubernetes Quota with confidence

microconfig

Modern tool for microservice configuration management

opstrace

The Open Source Observability Distribution

simulator

Kubernetes Security Training Platform - focusing on security mitigation