Kubernetes Operator for deploying and managing Sigstore components like Fulcio, Rekor, TSA, and TUF.

Why is this running?

A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.

Build the Linux kernel into OCI images, suitable for Edera products.

NBC is not bootc

SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.

The missing glue to put together large Kubernetes deployments, composed of multiple smaller parts (Helm/Kustomize/...) in a manageable and unified way.

A Go library for the Linux Landlock sandboxing feature

The best distro, is no distro.

A minimal, educational re-implementation of Kubernetes core control plane components in Go. This project is designed to demystify how Kubernetes works by letting you build, run, and experiment with…

Kubernetes in Apple Containerization

Sprout: UEFI Bootloader in Rust

Docker Compose Continuous Deployment

Kubernetes Commander

An open-source framework for verifiably private AI inference

Kubernetes simplified, containerized, and democratized for rootless environments.

OpenChoreo is an open-source internal developer platform (IDP)

Forkspacer is a Kubernetes-native tool for orchestrating and managing workspaces with modular environments and automation hooks.

JSON schema support for Go programs

A place for guests to view and drop pictures of the big day

Go gettext bindings based on purego.

The canonical source for Kubernetes Operators that are published on OperatorHub.io and part of the default catalog of the Operator Lifecycle Manager.

A management framework for extending Kubernetes with Operators

tun2socks - powered by gVisor TCP/IP stack

Docker-compatible REST API on top of Apple container

eBPF-based autoinstrumentation of web applications and network metrics

Bake microVMs into standalone executables

Package ipvs allows you to manage Linux IPVS services and destinations