K8S Awesome

Kubernetes Awesome

• cncf landscape
• awesome-cloud-native
• Service Mesh / Cloud Native
  • GoogleCloudPlatform/scionGitHubGoogleCloudPlatform/scion
    • Google Cloud Platform 相关的 Go 项目。
  • kumahq/kumaGitHubkumahq/kuma
    • 基于 Envoy 的多区域 service mesh，支持容器、Kubernetes 和 VM。

学习

• K3s 中文文档
  • 从 K3S 入门
  • 单节点，内置 etcd
• Kubernetes 文档/概念
  • 了解 K8S 基本概念和使用场景
• 然后
  • 部署服务
    • 迁移 docker 上的服务到 k8s
    • 利用 k8s 简化/优化 现有工作流
  • 了解内置组件，尝试利用和替换内置组件
    • Ingress - nginx, gateway
    • CNI - flannel, calico
    • CSI - openbsd, longhorn, nfs
    • Network - tinc, n2n, wg, metallb
  • 了解配合服务，提升使用体验
    • cert-manager, sealed-secret
    • helm, kustomize
    • 面板 - dashboard, rancher, lens
    • observability - prometheus, vector, fluntbit, jeager, grafana
    • gitops - arogocd, fluxcd
    • mesh - linkerd, istio
  • 了解 operator，部署和利用更多服务
    • operator -> 通过定义 Yaml 来部署新的服务栈 - SaaS 能力
    • 数据库、监控、日志、可视化、服务
  • 了解 cloud native 开发，调整开发利用云特性
    • consul
    • dapr
    • spring cloud, spring alibaba
    • 服务注册、发现、通讯
  • 了解新的平台开发方式
    • serverless
    • faas - fission, openfaas
    • baas
    • low-code
    • sidecar
• 参考
  • kubernetes-api
    • 当不确定 Yaml 有什么字段，字段有什么含义的时候查阅
    • kubectl explain 也可以

by Wener

• wenerme/chartsGitHubwenerme/charts
  • Helm charts 国内镜像
  • charts.wener.tech
• wenerme/container-mirrorGitHubwenerme/container-mirror
  • 容器国内镜像
  • registry.cn-hongkong.aliyuncs.com/cmi/
• wenerme/kube-stub-clusterGitHubwenerme/kube-stub-cluster
  • 集群部署模板 - 用于快速部署各种服务
  • 依赖 上面 helm 和 容器镜像
• wenerme/ansible-collection-wenerme-alpineGitHubwenerme/ansible-collection-wenerme-alpine
  • Ansible Colelction 用于管理 AlpineLinux
  • 支持部署配置 k3s, n2n, tinc, longhorn 等等
• wenerme/alpine-imageGitHubwenerme/alpine-imagelinux-lts - 110MB · linux-virt - 50MB · https://github.com/alpinelinux/aports/blob/master/scripts/mkimg.standard.sh · https://github.com/wenerme/alpine-image笔记：Alpine Image
  • 快速构建底层基础镜像

底层到上层过程

• alpine-image 构建镜像 - 虚拟机、云服务商
  • ansible-collection-wenerme-alpine 快速 setup 和 安装 k3s
    • kube-stub-cluster - 依赖 charts 和 container-mirror 快速部署一个可用集群

Awesomes

• derailed/popeyeGitHubderailed/popeye
  • cluster resource sanitizer
• google/gke-policy-automationGitHubgoogle/gke-policy-automation
  • Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices
• siderolabs/talosGitHubsiderolabs/talos
  • Linux distribution built for Kubernetes
• kubeboost/hostpath-multihost-provisionerGitHubkubeboost/hostpath-multihost-provisioner
• CSI Drivers
• kubernetes-sigs/cluster-apiGitHubkubernetes-sigs/cluster-api
  • Providers
• alexellis/arkadeGitHubalexellis/arkade
• kubedex
• devtron-labs/devtronGitHubdevtron-labs/devtron
  • Software Delivery Workflow For Kubernetes
  • Web 界面
  • 部署基于 argo rollout 修改
• kubeshop/monokleGitHubkubeshop/monokle
• oam-dev/kubevelaGitHuboam-dev/kubevela Modern Application Deployment System Based on Kubernetes and OAM
• acorn-io/acornGitHubacorn-io/acorn
  • simple application deployment framework for Kubernetes
• k8snetworkplumbingwg/multus-cniGitHubk8snetworkplumbingwg/multus-cni CNI meta-plugin for multi-homed pods in Kubernetes
• kubevirt/macvtap-cniGitHubkubevirt/macvtap-cni
• Validate
  • instrumenta/kubevalGitHubinstrumenta/kubeval
  • zegl/kube-scoreGitHubzegl/kube-score
  • Validating Kubernetes YAML for best practice and policies
• DevOps
  • awx
• Kubernetes Basic
  • metallb笔记MetalLBdanderson/metallb · 基于主机 L2 提供 LB 能力 - VIP/虚拟 IP/负载均衡 · 支持 L2 和 BGP 模式 · L2 使用 ARP/NDP - 配置简单 · 会监听所有网卡 · 流量只会到 一个节点 不是真正的负载均衡打开：/notes/devops/kubernetes/network/metallb
  • cert-manager笔记Cert Managerjetstack/cert-manager 是什么？ · 自颁发 CA 证书管理 · ACME 自动证书申请 · 外部证书管理集成 · crds - 自定义资源 · issuers.cert-manager.io · orders.acme.cert-manager.io打开：/notes/devops/kubernetes/app/cert-manager
  • kube-prometheus
• StorageClass
  • storageclass.info/storageclasses
• armosec/kubescapeGitHubarmosec/kubescape
  • testing if Kubernetes is deployed securely
• open-policy-agent/opaGitHubopen-policy-agent/opaopen-policy-agent/opa · REST API、gRPC API、SDK · 通用的、独立的政策引擎 · Rego · https://play.openpolicyagent.org/ · REST API · npm @open-policy-agent/opa-wasm笔记：OPA
• anchore/syftGitHubanchore/syft
• sigstore/cosignGitHubsigstore/cosignsigstore/cosign笔记：cosign
• Tencent/caelusGitHubTencent/caelus
• gardener/gardenerGitHubgardener/gardener
• LoadBalance
  • metallb笔记MetalLBdanderson/metallb · 基于主机 L2 提供 LB 能力 - VIP/虚拟 IP/负载均衡 · 支持 L2 和 BGP 模式 · L2 使用 ARP/NDP - 配置简单 · 会监听所有网卡 · 流量只会到 一个节点 不是真正的负载均衡打开：/notes/devops/kubernetes/network/metallb
  • openelb
  • PureLB
  • kube-vip/kube-vipGitHubkube-vip/kube-vip
    • Apache-2.0, Golang
• Network Policies
  • 隔离，进出流量控制
• 编排外部资源
  • crossplane/crossplaneGitHubcrossplane/crossplane
    • 管理基础设施
    • provider alibaba, aws, azure, gcp, rook, helm
  • GoogleCloudPlatform/k8s-config-connectorGitHubGoogleCloudPlatform/k8s-config-connector

Dashboard/UI

ui	in	web	desktop	cli	extensible
headlamp笔记healmapheadlamp-k8s/headlamp · Apache-2.0, Golang, TS · Web App, Desktop App · 支持 in-cluster 和 桌面模式打开：/notes/devops/kubernetes/app/headlamp	Go,TS,React,Redux	✅	✅		✅
portainer			✅
k9s	Golang			✅
kubernetes-dashboardGitHubkubernetes/dashboardkubernetes/dashboard · 非常简洁的 UI 面板 · Web UI (Dashboard) · Certificate management · '--tls-cert-file=/tls.crt' · '--tls-key-file=/tls.key'笔记：Kubernates 面板		✅
rancher	Golang	✅	✅
seabird	Golang+GTK		✅
lens	TS		✅
octantGitHubvmware-tanzu/octant	Golang	✅	✅		⭐️⭐️⭐️

• 命令行/TUI
  • k9s
  • kdash-rs/kdashGitHubkdash-rs/kdash
• Desktop/App
  • lens笔记Lenslensapp/lens · 2024-01-23 闭源 https://github.com/lensapp/lens/commit/e1fc8869a9e0033fb22665a990e07a6b72756630 · 替代 · k9s · kdash打开：/notes/devops/kubernetes/app/lens -> openlens
    • 2024-01-23 闭源
    • by Mirantis
  • headlamp笔记healmapheadlamp-k8s/headlamp · Apache-2.0, Golang, TS · Web App, Desktop App · 支持 in-cluster 和 桌面模式打开：/notes/devops/kubernetes/app/headlamp
    • Apache-2.0, Golang, TS
  • getseabird/seabirdGitHubgetseabird/seabird
    • MPL-2.0, Golang
  • kubenav/kubenavGitHubkubenav/kubenav
    • MIT, Dark, Golang
    • 移动端
  • portainer
    • 早期支持 docker，后来支持 k8s
• WebUI/dashboard
  • kubernetes/dashboardGitHubkubernetes/dashboardkubernetes/dashboard · 非常简洁的 UI 面板 · Web UI (Dashboard) · Certificate management · '--tls-cert-file=/tls.crt' · '--tls-key-file=/tls.key'笔记：Kubernates 面板
    • 简洁
  • Rancher笔记Rancher UIRancher - K8S 多集群管理运维平台 · rancher/rancher · 注意 · 如果 rancher 是作为工作负载运行在 k8s 集群，那么集群名字默认就为 local · HA 部署是通过 Helm 部署在 k8s 集群打开：/notes/devops/kubernetes/platform/rancher
  • OpenShift
  • kubewall/kubewallGitHubkubewall/kubewall
  • kubeappsGitHubkubeapps/kubeapps
    • 可简单的理解为 HELM WebUI
    • web-based UI for deploying and managing applications in Kubernetes clusters
  • goodrain/rainbondGitHubgoodrain/rainbond
    • Apache-2.0, Go
  • Kubesphere
• 商业/闭源
  • lens
  • infra.app
  • aptakube.com
    • 无免费方案
• kubernetes-sigs/kuiGitHubkubernetes-sigs/kui
  • 增强 kubectl
  • kubectl kui get pods
• Web UI (Dashboard)
• vmware-tanzu/octantGitHubvmware-tanzu/octant
  • Highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
• weaveworks/scopeGitHubweaveworks/scope
  • Monitoring, visualisation & management for Docker & Kubernetes
• indeedeng/k8dashGitHubindeedeng/k8dash
• hjacobs/kube-ops-viewGitHubhjacobs/kube-ops-view
  • Kubernetes Operational View - read-only system dashboard for multiple K8s clusters
• hjacobs/kube-resource-reportGitHubhjacobs/kube-resource-report
• kube-web-view alternatives
• oslabs-beta/kr8sGitHuboslabs-beta/kr8s
  • Docker/Kubernetes Visualization Tool
• dnsjia/lubanGitHubdnsjia/luban
  • Apache-2.0, Go+Vue3+AntD
• eip-work/kuboard-pressGitHubeip-work/kuboard-press

Distribution

• Rancher vs. Kubesphere故事Rancher vs. Kubesphere| info. | Rancher | Kubesphere | · | 开发者 | Rancher/SUSE | 青云开源 | · | 源码 | rancher/rancher | kubesphere/kubesphere | · | Stars | 15.5k | 4.6k |打开：/story/rancher-vs-kubesphere
• K3S vs. K0S故事K3S vs K0S| vs. | k0s | k3s | · | since | 2020-06 | 2019-03 | · | by | Mirants | Rancher/SUSE | · | Governance | Mirants | CNCF | · | Github | [k0sproject/k0s] | [k3s-io/k3s] |打开：/story/k3s-vs-k0s

• 平台
  • openshift - openshift/okdGitHubopenshift/okd - openshift 社区版
    • by Red Hat
  • rancherGitHubrancher/rancherRancher - K8S 多集群管理运维平台 · rancher/rancher · 注意 · 如果 rancher 是作为工作负载运行在 k8s 集群，那么集群名字默认就为 local · HA 部署是通过 Helm 部署在 k8s 集群笔记：Rancher UI
    • by SUSE
  • kubesphereGitHubkubesphere/kubesphere| info. | Rancher | Kubesphere | · | 开发者 | Rancher/SUSE | 青云开源 | · | 源码 | rancher/rancher | kubesphere/kubesphere | · | Stars | 15.5k | 4.6k |故事：Rancher vs. Kubesphere
    • by 青云
• Edge/Minimal
  • k3s-io/k3sGitHubk3s-io/k3s节点的名字需要唯一 · 默认使用 hostname · 可使用 或 修改 · k3s 会读取 或 作为节点 UUID · kubconfig 文件 · 部署 traefik 作为 ingress · k3s-io/k3s · 环境要求 · Linux 3.10+笔记：K3S
    • by Rancher, SUSE
  • rancher/k3osGitHubrancher/k3os
    • 基于 Alpine 的 K3S 系统镜像
    • 推荐直接使用 Alpine 然后安装 k3s

    apk add k3s

  • k0sproject/k0sGitHubk0sproject/k0s[k0s] 是什么？ · 类似 k3s 的精简 k8s · 无系统依赖 - 静态 · 无外部依赖 · 支持 amd64 Windows · 支持 amd64, arm, arm64 · 网络 · kube-router - 默认 · 资源占用更少 - 比 calico 少 15%笔记：k0s
    • by Team Lens - mirantis
  • kubeedge/kubeedgeGitHubkubeedge/kubeedge
    • CNCF, Huawei
• 本地开发
  • microk8s
  • kubernetes-sigs/kindGitHubkubernetes-sigs/kindkubernetes-sigs/kind - kind is a tool for running local Kubernetes clusters using Docker container "nodes".笔记：Kubernetes in Docker (kind) - Kubernetes in Docker
    • Apache-2.0, Golang
  • rancher/k3dGitHubrancher/k3drancher/k3d - 容器运行 · 基于之前的 zeerorg/k3s-in-docker · rancher/k3s/docker-compose.yml · write to /etc/rancher/k3s/registries.yaml笔记：K3S in Docker - K3S in Docker
• Installer
  • rancher/rke2GitHubrancher/rke2
  • rancher/rkeGitHubrancher/rke
    • 推荐使用 rke2
  • autok3s
  • kubeadmGitHubkubernetes/kubeadm
  • kubernetes-sigs/kubesprayGitHubkubernetes-sigs/kubespraykubernetes-sigs/kubespray - Deploy a Production Ready Kubernetes Cluster.笔记：Kubespray
    • ansible based
  • kubernetes/kopsGitHubkubernetes/kopskubernetes/kops · Production Grade K8s Installation, Upgrades, and Management笔记：kops
• 有趣
  • loft-sh/vclusterGitHubloft-sh/vcluster
    • 虚拟集群 - 映射集群到 namespace
  • COSIGitHubkubernetes-sigs/container-object-storage-interface-spec
• 正常发行版
  • scality/metalk8sGitHubscality/metalk8s
    • focus on long-term on-prem
• 兼容适配
  • kcp-dev/kcpGitHubkcp-dev/kcp
    • 兼容 kubectl api
    • 用于实现自定义 cp
    • 不是实际的 kubernetes
• 偏商业化版本
  • cloudfoundry/cf-for-k8sGitHubcloudfoundry/cf-for-k8s
    • 基于 k8s 之上的平台
  • vmware-tanzu/community-editionGitHubvmware-tanzu/community-edition
    • Tanzu 社区版
• 不活跃
  • gravitational/gravityGitHubgravitational/gravity Kubernetes application deployments for restricted, regulated or remote environments

• CNCF certified Kubernetes distributions and platforms

GitOps

• Render/Template
  • Helm笔记HELM 包管理器helm/helm 是什么 · Kubernetes 上的包管理器 · helm.sh · 环境变量列表 · nexus 可通过插件支持 helm sonatype-nexus-community/nexus-repository-helm打开：/notes/devops/kubernetes/ops/helm
    • gotpl, sprig
  • Kustomize笔记kustomizekubernetes-sigs/kustomize · kustomize reference · kubectl apply -k · v1.14+ · #1500 - 升级到新版受到阻碍 · 特点 · 不基于字符串模板 · 变量引用 · vars打开：/notes/devops/kubernetes/ops/kustomize
  • jsonnetGitHubgoogle/jsonnet
    • data templating language
    • JSON 超集
    • google/go-jsonnetGitHubgoogle/go-jsonnet
• 编排
  • helm
  • tanka
    • jsonet
    • by Grafana
    • ArgoCD 不支持 argoproj/argo-cd#3124GitHub Issueargoproj/argo-cd#3124
  • Terraform
• argocd笔记ArgoCDargoproj/argo-cd 是什么？ · 声明式 K8S 持续集成/CD 服务/控制器 · GitOps · 有 直观的 WebUI 可供管理和问题排查 · 支持多集群、统一登录、权限管理 · DEMO · 特性 · 自动化部署应用到指定环境打开：/notes/devops/kubernetes/app/argocd
• fleet笔记FleetCDrancher/fleet · 多集群 GitOps · 使用 clusterSelector, clusterGroupSelector, clusterGroup 为 GitRepo 选择集群 - 直接应用到多个集群 · 应用自动发现 · 检测 fleet.yaml打开：/notes/devops/kubernetes/app/fleet
• flux笔记FluxCDfluxcd/flux2 · Flux v1 已经进入维护模式，v2 调整为了工具集模式 · fluxcd/webui · 场景 · 集群运维人员 · 自动配置 · 平台工程师 · CD · 应用开发者 · CD · 特性 · 支持 Git、Helm、S3 作为仓库打开：/notes/devops/kubernetes/app/flux
• flux-subsystem-argo/flamingoGitHubflux-subsystem-argo/flamingo
  • ArgoCD + Flux
  • by Weave Works
• helmfile/helmfileGitHubhelmfile/helmfile

servicemesh

• linkerd
• consul
• openservicemesh/osmGitHubopenservicemesh/osm

网络

• projectcontour/contourGitHubprojectcontour/contour Kubernetes ingress controller using Envoy proxy
• projectcontour/gimbalGitHubprojectcontour/gimbal ingress load balancing capable of routing traffic to multiple Kubernetes
• voyagermesh/voyagerGitHubvoyagermesh/voyager L7/L4 (HAProxy) Ingress Controller

Operator

• operator-framework/operator-lifecycle-managerGitHuboperator-framework/operator-lifecycle-manager
  • olm.operatorframework.io
  • operatorhub.io
• Service
  • grafana-operator/grafana-operatorGitHubgrafana-operator/grafana-operator参考 · api · API · GrafanaDashboard · GrafanaDataSource · GrafanaNotificationChannel · Grafana · 支持的 grafana 版本相对旧 - constants.go#L5笔记：grafana-operator
    • Grafana,GrafanaDashboard,GrafanaDataSource,GrafanaNotificationChannel
  • keycloak/keycloak-operatorGitHubkeycloak/keycloak-operatorkeycloak/operator · CRD · Keycloak · KeycloakRealm · KeycloakUser · KeycloakClient · KeycloakBackup · 参考 · https://www.keycloak.org/guides#operator笔记：keycloak-operator
    • Keycloak,KeycloakRealm,KeycloakUser,KeycloakClient
  • minio/operatorGitHubminio/operatoroperator-framework/awesome-operators · banzaicloud/logging-operator · Logging operator for Fluentd and FluentBit · | application | operator |笔记：Kubernetes Operators
    • APIGitHub Fileminio/operator/docs/crd.adoc
• Infra
  • nats-io/nats-operatorGitHubnats-io/nats-operator
    • 不推荐使用
  • VictoriaMetrics/operatorGitHubVictoriaMetrics/operatorVictoriaMetrics/operator · 管理监控配置 · 服务部署 · VictoriaMetrics/helm-charts · Helm 部署 Repo - 推荐 operator 部署 · 监控 · | prometheus | vm |笔记：VictoriaMetrics Operator
  • jaegertracing/jaeger-operatorGitHubjaegertracing/jaeger-operatorjaegertracing/jaeger-operator · API · Jaeger · namespace/deployment annotation sidecar.jaegertracing.io/inject笔记：Jaeger Operator
  • prometheus-operator/prometheus-operatorGitHubprometheus-operator/prometheus-operator
  • strimzi/strimzi-kafka-operatorGitHubstrimzi/strimzi-kafka-operator
• PostgreSQL
  • zalando/postgres-operator笔记zalando/postgres-operatorMIT, Go · Patroni - Streaming replication · PITR - Spilo - pgbasebackup/WAL-E · Preload - bgmon, pgstatstatements, pgextwlist, pgauthmon打开：/notes/devops/kubernetes/app/zalando-postgres-operator
    • MIT, Go
    • 🌟 推荐
  • CrunchyData/postgres-operatorGitHubCrunchyData/postgres-operatorCrunchyData/postgres-operator · Apache-2.0, Go · 备份使用 pgbackrest · https://pgbackrest.org/configuration.html · https://access.crunchydata.com/documentation/postgres-operator/v5/...笔记：pgo
    • Active-Active PostgreSQL Federation on Kubernetes
  • sorintlab/stolonGitHubsorintlab/stolonsorintlab/stolon · Apache-2.0, Go, PostgreSQL, HA, Kubernetes, etcd, Consul · PostgreSQL cloud native High Availability manager，基于 PostgreSQL streaming replication。笔记：stolon
    • Apache-2.0, Go
    • 🚧 停滞
  • reactive-tech/kubegresGitHubreactive-tech/kubegres
    • Apache-2.0,
    • 🚧 停滞
  • ongres/stackgresGitHubongres/stackgres
    • AGPLv3, Java
• openshift/elasticsearch-operatorGitHubopenshift/elasticsearch-operator
• operator-framework/operator-lifecycle-managerGitHuboperator-framework/operator-lifecycle-manager
• Opster/opensearch-k8s-operatorGitHubOpster/opensearch-k8s-operator
• operatorhub.io

Secret & ConfigMap

• bitnami-labs/sealed-secretsGitHubbitnami-labs/sealed-secretsbitnami-labs/sealed-secrets · Apache-2.0, Go · one-way encrypted Secrets · 加密 Secret 对象为 SealedSecret，用于安全提交到 git 仓库 · 集群内的 controller 会将 SealedSecret 解密为 Secret笔记：sealed-secrets
  • 生成不可逆的密钥存储在仓库，控制器生成对应 Secret - 非对称加密
  • 最简单实用
• external-secrets/external-secretsGitHubexternal-secrets/external-secretsexternal-secrets/external-secrets 是什么？ · ExternalSecrets CRD · 支持 外部 获取信息生成实际 Secret · 支持 · HashiCorp Vault · Kubernetes - 本地或远程 Cluster笔记：external-secrets
  • hashicorp vault, aws sm, aws ps, gcp sm
  • alibaba cloud kms, Gitlab Project Variables
• banzaicloud/bank-vaultsGitHubbanzaicloud/bank-vaults
• hashicorp/vaultGitHubhashicorp/vaulthashicorp/vault 是什么？ · BSLv1.1, Golang · 提供密钥管理、证书管理、外部授权集成 · 提供角色访问密钥权限控制 · 实现 CA 服务 · Secret as a Service - 密钥即服务 · 例如 阿里云 KMS、AWS KMS笔记：Vault
  • Secret as a Service, Encryption as a Servic
  • 如何与 K8S 集成是个问题
• kubernetes-sigs/secrets-store-csi-driverGitHubkubernetes-sigs/secrets-store-csi-driver
  • aws, azure, gcp, vault
• jkroepke/helm-secretsGitHubjkroepke/helm-secretsSealed Secrets 最简单，但有时候用不了 · 例如 secret 写在 value.yaml 的时候 · 建议配合 age, SOPS · Bitnami Sealed Secrets · External Secrets Operator笔记：Secrets
• viaduct-ai/kustomize-sopsGitHubviaduct-ai/kustomize-sops
• argoproj-labs/argocd-vault-pluginGitHubargoproj-labs/argocd-vault-pluginargoproj-labs/argocd-vault-plugin · ArgoCD 密钥管理 · 支持后端 · HashiCorp Vault · SOPS · AVP -> argocd-vault-plugin · 安装 · https://github.com/argoproj-labs/argocd-vault-plugin/tree/mai...笔记：argocd-vault-plugin
  • argocd + HashiCorp Vault
  • 早期由 IBM 开发
• 参考
  • Secret Management

工具

• kubeops/config-syncerGitHubkubeops/config-syncer
  • 原 kubed
  • Go, Apache-2.0
• reflectorGitHubemberstack/kubernetes-reflector
  • C#, MIT

应用/Application

• oam-dev/specGitHuboam-dev/spec Open Application Model
• oam-dev/kubevelaGitHuboam-dev/kubevela
• openkruise/kruiseGitHubopenkruise/kruise Automate application management
• openpitrix/openpitrixGitHubopenpitrix/openpitrix
  • 开发停止

开发/Dev

• telepresenceio/telepresenceGitHubtelepresenceio/telepresencetelepresenceio/telepresence · Apache-2.0, Go · team mode 依赖 Ambassador Cloud #2996 · intercept · global · 一个服务只能一个人拦截 · personal笔记：telepresence
• solo-io/squashGitHubsolo-io/squash
• open-hand/choerodonGitHubopen-hand/choerodon Multi-Cloud Integrated Platform
• metacontroller/metacontrollerGitHubmetacontroller/metacontroller

Build

• pivotal/kpackGitHubpivotal/kpack
  • Kubernetes Native Container Build Service

运维/Ops

• robusta-dev/robustaGitHubrobusta-dev/robusta

Notify

• bitnami-labs/kubewatchGitHubbitnami-labs/kubewatch
  • Watch k8s events and trigger Handlers

Misc

• vmware-tanzu/sonobuoyGitHubvmware-tanzu/sonobuoy diagnostic tool to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests
• kvdi/kvdiGitHubkvdi/kvdi Kubernetes-native Virtual Desktop Infrastructure
• kris-nova/namlGitHubkris-nova/naml replacing Kubernetes YAML with Go
• cdk8s-team/cdk8sGitHubcdk8s-team/cdk8s
• ovh/cdsGitHubovh/cds Continuous Delivery Service
• Qihoo360/wayneGitHubQihoo360/wayne multi-cluster management and publishing platform
• nuclio/nuclio(★ 5.7k · 2026-06-10 · Apache-2.0 · Go)GitHubnuclio/nuclioHigh-Performance Serverless event and data processing platformGo · ★ 5.7k · Forks 562 · Last commit 2026-06-10 · Apache-2.0Go笔记：nuclio出现位置：CVAT、K8S Awesome、Data Awesome、Serverless Awesome、Service Awesome Serverless event and data processing platform
• kyverno/kyvernoGitHubkyverno/kyverno Kubernetes Native Policy Management
• Grafeas/GrafeasGitHubGrafeas/Grafeas Artifact Metadata API

API Gateway

• luraproject/luraGitHubluraproject/luraluraproject/lura · Apache-2.0, Go · 实现 API Gateways 的工具集 · krakend 基于 lura 的 API Gateway笔记：lura
  • builder , proxy generator, aggregator
  • client -> lura -> N*Service
• kubernetes-sigs/service-catalogGitHubkubernetes-sigs/service-catalog
• openservicebrokerapi/servicebrokerGitHubopenservicebrokerapi/servicebroker

Conf

• consul
  • Caiyeon/goldfishGitHubCaiyeon/goldfish
    • UI, 已停止, 可参考
• ctripcorp/apolloGitHubctripcorp/apollo
  • Apache-2.0, Java
  • 携程
  • 配置管理系统

Tool

• txn2/kubefwdGitHubtxn2/kubefwd Bulk port forwarding
• stakater/Reloader笔记Reloaderstakater/Reloader · ConfigMap, Secret -> DeploymentConfig, Deployment, Daemonset, Statefulset, Rollout打开：/notes/devops/kubernetes/app/reloader watch changes in ConfigMap and Secrets and do rolling upgrades on Pod
  • 重启 - 全局部署一个
• prometheus-config-reloader笔记prometheus-config-reloader强求 reload 接口 - 作为 sidecar 部署 · fsnotify · quay.io/prometheus-operator/prometheus-config-reloader · | flag | · | --config-file file | 被监听文件 |打开：/notes/devops/kubernetes/app/prometheus-config-reloader
  • 强求 reload 接口 - 作为 sidecar 部署
  • quay.io/prometheus-operator/prometheus-config-reloader
• telepresenceio/telepresenceGitHubtelepresenceio/telepresencetelepresenceio/telepresence · Apache-2.0, Go · team mode 依赖 Ambassador Cloud #2996 · intercept · global · 一个服务只能一个人拦截 · personal笔记：telepresence Local development against a remote Kubernetes
• jimmidyson/configmap-reloadGitHubjimmidyson/configmap-reload

Install

• easzlab/kubeaszGitHubeaszlab/kubeasz Ansible 脚本安装 K8S 集群
• talos-systems/talosGitHubtalos-systems/talos modern OS for Kubernetes
  • MPL-2.0, Go
  • secure, immutable, minimal
  • 通过 API 管理系统 - 无 shell
  • mTLS
• KubeOperator/KubeOperatorGitHubKubeOperator/KubeOperator KubeOperator 是一个开源的轻量级 Kubernetes 发行版
• kubernetes-sigs/kubesprayGitHubkubernetes-sigs/kubespraykubernetes-sigs/kubespray - Deploy a Production Ready Kubernetes Cluster.笔记：Kubespray Deploy a Production Ready Kubernetes Cluster

Client

• kubernetes-clientGitHub Orgkubernetes-client
• github.com/topics/k8s-sig-api-machinery
• kubernetes-client/javascriptGitHubkubernetes-client/javascript
  • @kubernetes/client-node
    • 2.3MB, 350KB

npm install @kubernetes/client-node

Packages@kubernetes/client-nodenpm Package@kubernetes/client-nodeNPM

Security

• kuadrant/authorinoGitHubkuadrant/authorino Cloud-native AuthN/AuthZ enforcer

Build Controller & Operator

• KubeBuilder
• rancher/wranglerGitHubrancher/wrangler
• kubernetes-sigs/controller-toolsGitHubkubernetes-sigs/controller-tools
• spotahome/gontrollerGitHubspotahome/gontroller
• kubernetes/sample-controllerGitHubkubernetes/sample-controller
• kudobuilder/kudoGitHubkudobuilder/kudo
  • Kubernetes Universal Declarative Operator

Misc

• opsgenie/kubernetes-event-exporterGitHubopsgenie/kubernetes-event-exporter