Projects

Kubeflowgraduated

Machine learning toolkit for Kubernetes — makes ML workflows portable and scalable.

KServeincubating

Standardized serverless ML inference platform on Kubernetes for production model serving.

hamiincubating

Heterogeneous GPU Sharing on Kubernetes

Argograduated

Kubernetes-native workflows, events, CI/CD, and GitOps toolset for declarative continuous deployment.

Buildpacksgraduated

Transforms application source code into container images without Dockerfiles.

Fluxgraduated

GitOps toolkit for continuous delivery — keeps Kubernetes clusters in sync with configuration sources.

Artifact Hubincubating

Web-based application for finding, installing, and publishing CNCF packages.

Backstageincubating

Open platform for building developer portals — unifies infrastructure tooling and documentation.

KubeVelaincubating

Application-centric platform for making shipping applications easier and faster.

Microcksincubating

The open source, cloud native tool for API Mocking and Testing. Microcks is a Cloud Native Computing Foundation sandbox project

OpenFeatureincubating

Vendor-agnostic standard for feature flag management across applications.

OpenKruiseincubating

Advanced workload management for Kubernetes including enhanced rolling updates and sidecar management.

Tektonincubating

Cloud-native CI/CD building blocks for Kubernetes

CRI-Ograduated

Lightweight container runtime specifically built for Kubernetes.

CoreDNSgraduated

DNS server and service discovery plugin that integrates with Kubernetes.

Helmgraduated

The package manager for Kubernetes — define, install, and upgrade complex Kubernetes applications.

Kubernetesgraduated

Production-grade container orchestration for automating deployment, scaling, and management of containerized applications.

containerdgraduated

Industry-standard container runtime with emphasis on simplicity, robustness, and portability.

etcdgraduated

Distributed reliable key-value store for the most critical data of a distributed system.

Limaincubating

Linux virtual machines, with a focus on running containers

k8gbincubating

A cloud native Kubernetes Global Balancer

Ciliumgraduated

eBPF-based networking, security, and observability for cloud-native workloads.

CloudEventsgraduated

Specification for describing event data in a common way across services and platforms.

Envoygraduated

High-performance L7 proxy and communication bus designed for large microservice architectures.

Istiograduated

Service mesh providing traffic management, security, and observability for microservices.

Linkerdgraduated

Ultralight, security-first service mesh for Kubernetes with zero-config mTLS.

Container Network Interface (CNI)incubating

Specification and libraries for configuring network interfaces in Linux containers.

Contourincubating

Kubernetes ingress controller using Envoy proxy for HTTP/HTTPS routing.

Emissary-Ingressincubating

Kubernetes-native API gateway built on Envoy proxy for microservices.

NATSincubating

Cloud-native messaging system for adaptive edge and distributed systems.

Strimziincubating

Runs Apache Kafka on Kubernetes with operators for automated cluster management.

gRPCincubating

High-performance, open source universal RPC framework for connecting services.

Fluentdgraduated

Unified logging layer that collects, transforms, and routes log data from any source.

Jaegergraduated

End-to-end distributed tracing for monitoring and troubleshooting microservice architectures.

OpenTelemetrygraduated

Vendor-neutral observability framework for generating, collecting, and exporting telemetry data.

Prometheusgraduated

Monitoring system and time-series database for metrics collection and alerting.

Chaos Meshincubating

Cloud-native chaos engineering platform for testing system resilience on Kubernetes.

Cortexincubating

Horizontally scalable, highly available, multi-tenant long-term Prometheus storage.

Litmusincubating

Cloud-native chaos engineering framework for practicing chaos engineering in a Kubernetes-native way.

OpenCostincubating

Real-time cost monitoring for Kubernetes workloads and cloud infrastructure.

Thanosincubating

Highly available Prometheus setup with long-term storage and global query view.

Crossplanegraduated

Build control planes without needing to write code. Manage cloud infrastructure using Kubernetes APIs.

Daprgraduated

APIs for building portable and reliable microservices with any language and framework.

KEDAgraduated

Kubernetes-based event driven autoscaler. Scale any container based on events from various sources.

Knativegraduated

Kubernetes-based platform to deploy and manage serverless workloads.

Fluidincubating

Data-aware application scheduling and orchestration for data-intensive workloads on Kubernetes.

Karmadaincubating

Multi-cluster Kubernetes management system for workload distribution across clusters.

KubeVirtincubating

Run virtual machines on Kubernetes alongside containerized workloads.

Operator Frameworkincubating

Toolkit for building and managing Kubernetes operators.

Volcanoincubating

Kubernetes-native batch computing and job scheduling system for high-performance workloads.

wasmCloudincubating

Platform for building distributed applications with WebAssembly components.

KubeEdgegraduated

Extends Kubernetes to edge devices for reliable edge computing with offline capabilities.

Flatcar Container Linuxincubating

Minimal, immutable Linux distribution designed for running containers at scale.

OpenYurtincubating

Extends Kubernetes for seamless edge computing with autonomy and unitized management.

metal3-ioincubating

Bare metal host provisioning for Kubernetes using Kubernetes-native APIs.

Falcograduated

Cloud-native runtime security tool that detects unexpected application behavior and threats.

Kyvernograduated

Kubernetes-native policy engine for validation, mutation, and generation of configurations.

Open Policy Agent (OPA)graduated

General-purpose policy engine for unified authorization across the entire stack.

SPIFFEgraduated

Secure Production Identity Framework — provides cryptographic identity to workloads.

SPIREgraduated

SPIFFE Runtime Environment — production-ready workload identity issuer.

The Update Framework (TUF)graduated

Framework for securing software update systems against various attacks.

cert-managergraduated

Automates TLS certificate management and issuance from various sources in Kubernetes.

in-totograduated

Provides guarantees about the integrity and security of software supply chains.

Cloud Custodianincubating

Rules engine for cloud security, cost optimization, and governance compliance.

Keycloakincubating

Open source identity and access management for modern applications and services.

Kubescapeincubating

Kubernetes security platform for scanning clusters, RBAC, and compliance checks.

Notary Projectincubating

Standards-based content signing and verification for container images and artifacts.

OpenFGAincubating

High-performance authorization engine for fine-grained access control.

CubeFSgraduated

Cloud-native distributed file system and object store for large-scale data.

Dragonflygraduated

P2P-based image and file distribution system for faster container image delivery.

Harborgraduated

Cloud-native container registry with security scanning, RBAC, and replication.

Rookgraduated

Cloud-native storage orchestrator for Kubernetes — provides block, file, and object storage.

TiKVgraduated

Distributed transactional key-value database with ACID compliance and horizontal scalability.

Vitessgraduated

Database clustering system for horizontal scaling of MySQL through sharding.

Longhornincubating

Cloud-Native distributed storage built on and for Kubernetes