Kypello (Greek for Vessel or Chalice) is a high-performance, distributed object storage suite designed for the cloud-native era. It is a community-driven fork of the MinIO project, established to preserve and maintain critical enterprise functionality—specifically OpenID Connect (OIDC) and SSO integration—within the open-source ecosystem.
We believe that secure identity management is a fundamental requirement for modern infrastructure, not a luxury feature. Kypello ensures these features remain accessible to everyone under the GNU AGPLv3 license.
| Repository | Role | Description |
|---|---|---|
| kypello | Core Server | The object storage server. Fully S3-compatible, resilient, and built for scale. |
| kypello-ui | Console / UI | The management dashboard. Includes the restored OIDC/SSO login flows and identity management tools. |
| kes | Encryption | Key Encryption Service. Bridges the Kypello server with external KMS providers (Vault, AWS KMS, etc). |
- Restored OIDC Support: Seamless integration with Zitadel, Keycloak, Okta, Active Directory, and Google Workspace out of the box.
- 100% Open Source: No "open core" limitations. What you see is what you get, licensed under AGPLv3.
- Drop-in Replacement: API compatible with S3 and generally compatible with existing MinIO deployments (with configuration updates).
To build Kypello from source with the restored UI:
# Clone the server
git clone https://github.com/kypello-io/kypello.git
cd kypello
# Build the binary (automatically embeds the Kypello UI)
make server
# Run the server
./kypello server /data