xeusnguyen.xyz

Search

SearchSearch

Recent Notes

See 153 more β†’

Awesome Kubernetes

Jul 20, 2025, 15 min read

Purpose

This page is created for purpose store relation to helpful articles, make a some reference link when you can check and understand more about K8s (Kubernetes) and awesome things with this orchestration, but also learning and exploring more about worldwide containerization πŸ”₯

Kubernetes

center

Articles / Documentation / Practicing

Azure Kubernetes Service (AKS)

Container Runtime (CRI)

Do It Yourself (DIYs)

eBPF

Elastic Kubernetes Service (EKS)

Fundamental

General

Hardware and Resources

Networking (CNI / DNS)

Storage (CSI)

Story and Question

Tips for Configuration

Tools

Troubleshoot

Awesome repositories

Blogs

Certificate & Practice

Operator & Chart

  • Artifacthub : Find, install and publish Cloud Native packages for Kubernetes 🌟 (Recommended)
  • Bitami Hem Chart: Popular applications, provided byΒ Bitnami, ready to launch on Kubernetes 🌟 (Recommended)
  • BJW Helm Chart: Helm template for common application
  • Knative: An Open-Source Enterprise-level solution to build Serverless and Event Driven Applications. Documentation
  • Kubeblocks: Β an open-source Kubernetes operator for databases (more specifically, for stateful applications, including databases and middleware like message queues), enabling users to run and manage multiple types of databases on Kubernetes.
  • MongoDB Community Kubernetes Operator, you can take the look some crd, and configuration with github link like CRD and Samples
  • mongodb-kubernetes-operator : MongoDB Community Kubernetes Operator
  • OperatorHub: Home for the Kubernetes community to share Operators 🌟 (Recommended)
  • Poly Helm Chart: Self-define Helm chart for AI purpose application
  • Rancher Helm Chart: A catalog based on applications from independent software vendors (ISVs). Most of them are SUSE Partners
  • Strimzi: Strimzi simplifies the process of runningΒ Apache KafkaΒ within a Kubernetes cluster

Organizations

  • ApeCloud: The community who focus on designing architecture inside Cloud Platform, especially Kubernetes. Author of Kubeblocks
  • AppsCode: Kubernetes-native Data Platform 🌟 (Recommended)
  • Carvel: a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. Author of ytt, kapp-controller
  • Devtron Inc: Software Delivery Workflow For Kubernetes 🌟 (Recommended)
  • DaoCloud: An innovation leader in the cloud-native field 🌟 (Recommended)
  • Kubecost: Organization of Kubecost - a monitoring application which provides real-time cost visibility and insights for teams using Kubernetes, helping you continuously reduce your cloud costs
  • Kubeflow: An open, community driven project to make it easy to deploy and manage an ML stack on Kubernetes
  • Kubernetes CSI: Kubernetes specific Container-Storage-Interface (CSI) components 🌟 (Recommended)
  • Kubernetes: Production-Grade Container Scheduling and Management 🌟 (Recommended)
  • kubernetes-sigs : Org for Kubernetes SIG-related work 🌟 (Recommended)
  • KubeWharf: Developer community legit insane tools for Kubernetes
  • Medik8s: Medik8s (pronounced medicates) aims for automatic detection and recovery of unhealthy k8s nodes
  • Polyaxon: A platform for reproducible and scalable machine learning and deep learning
  • The Helm Project: The package manager for Kubernetes 🌟 (Recommended)
  • VMware Tanzu: Cloud native open source from VMware, almost for Kubernetes, Author of velero

Topics

Kubernetes Tools

API Gateway / Ingress Controller / LB

  • AGIC - Application Gateway Ingress Controller: Possible for Azure Kubernetes Service (AKS) customers to leverage Azure’s native Application Gateway L7 load-balancer to expose cloud software to the Internet. Azure Article
  • AWS Load Balancer Controller: AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster 🌟 (Recommended)
  • Gateway API: Gateway API is an official Kubernetes project focused on L4 and L7 routing in Kubernetes
  • Ingress-Nginx Controller : Documentation about Nginx ingress which use for delivery IN/OUT traffic for Kubernetes Cluster 🌟 (Recommended)
  • Kong Ingress Controller: Allows you to run Kong Gateway as a Kubernetes Ingress to handle inbound requests for a Kubernetes cluster 🌟 (Recommended)
  • kube-vip: Provides Kubernetes clusters with a virtual IP and load balancer for both the control plane (for building a highly-available cluster) and Kubernetes Services of typeΒ LoadBalancerΒ without relying on any external hardware or software.
  • MetalLB: A load-balancer implementation for bare metalΒ KubernetesΒ clusters, using standard routing protocols.
  • Nginx Gateway Fabric: Provides an implementation for the Gateway API using NGINX as the data plane.
  • Traefik - ApiGateway: A drop-in replacement for Traefik Proxy, it can do everything Traefik Proxy does, with additional capabilities and support out of the box.
  • Traefik - Ingress Controller: A Kubernetes Ingress controller; that is to say, it manages access to cluster services by supporting theΒ IngressΒ specification.

Autoscaling

  • Keda: Kubernetes Event-driven Autoscaling
  • Kubernetes Autoscaler: Autoscaling components for Kubernetes 🌟 (Recommended)

Agents

  • botkube: An app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices 🌟 (Recommended)
  • kagent: A Kubernetes native framework for building AI agents 🌟 (Recommended)

Backup

  • velero: Backup and migrate Kubernetes applications and their persistent volumes
  • trilio: A data protection and backup solution specifically designed for Kubernetes environments

Benchmark and Validation

  • kube-bench: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  • kubeconform: A FAST Kubernetes manifests validator, with support for Custom Resources!
  • Instance calculator : Estimate and find the number of max workload can apply for instance
  • silver-surfer: Kubernetes objects api-version compatibility checker and provides migration path for K8s objects and prepare it for cluster upgrades

Chaos

  • chaos-mesh: A Chaos Engineering Platform for Kubernetes.
  • litmus: Chaos Engineering Framework with cross-cloud support.

Cluster Management

  • Crossplane: An open source Kubernetes extension that transforms your Kubernetes cluster into aΒ universal control plane.
  • GlassKube : An open-source Kubernetes package manager that simplifies package management for Kubernetes
  • kubeapps: A web-based UI for deploying and managing applications in Kubernetes clusters
  • kubeshark: The API traffic analyzer for Kubernetes providing real-time K8s 🌟 (Recommended)
  • lens: Lens - The way the world runs Kubernetes 🌟 (Recommended)

Configuration Management

  • Reloader: A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig 🌟 (Recommended)
  • vals: Helm-like configuration values loader with support for various sources 🌟 (Recommended)

Development Environment

  • devspace: The Fastest Developer Tool for Kubernetes

Development Library

  • kooper: A simple Go library to create Kubernetes operators and controllers.
  • kubebuilder: SDK for building Kubernetes APIs using CRDs

DNS and SSL

  • cert-manager: Automatically provision and manage TLS certificates in Kubernetes 🌟 (Recommended)
  • external-dns: Configure external DNS servers

GPU Scheduler

Kubectl Tools Kit

  • krew: πŸ“¦ Find and install kubectl plugins 🌟 (Recommended)
  • kube-capacity: A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster 🌟 (Recommended)
  • kubectl-node-shell: Exec into node via kubectl 🌟 (Recommended)
  • kubectl-trace: Schedule bpftrace programs on your kubernetes cluster using the kubectl
  • kubectl-tree: kubectl plugin to browse Kubernetes object hierarchies as a tree πŸŽ„
  • kubectl-view-allocations: kubectl plugin to list allocations (cpu, memory, gpu,… X utilization, requested, limit, allocatable,…) 🌟 (Recommended)

Kubernetes Hosted

  • eksctl: The official CLI for Amazon EKS. Website
  • K0s: k0s is an open source, all-inclusive Kubernetes distribution, which is configured with all of the features needed to build a Kubernetes cluster.
  • K3s: Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB 🌟 (Recommended)
  • Kind : kindΒ is a tool for running local Kubernetes clusters using Docker container β€œnodes” 🌟 (Recommended)
  • Kubernetes Goat: An interactive Kubernetes security learning playground
  • Kubernetes Official solution : Installing Kubernetes with deployment tools. Such as: kubespray, kubeadm 🌟 (Recommended)
  • MicroK8s: MicroK8s is a low-ops, minimal production Kubernetes.
  • minikube : minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows
  • Talos Linux : The Kubernetes Operating System
    • cluster-template: A template for deploying a Talos Kubernetes cluster including Flux for GitOps
  • kubevirt: Provides a unified development platform where developers can build, modify, and deploy applications residing in both Application Containers as well as Virtual Machines in a common, shared environment.

Monitoring

  • kube-state-metrics: Add-on agent to generate and expose cluster-level metrics 🌟 (Recommended)
  • metrics-server: Scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines 🌟 (Recommended)
  • OpenSLO: Open specification for defining and expressing service level objectives (SLO)
  • prometheus-operator: AΒ Kubernetes OperatorΒ that provides Kubernetes native deployment and management ofΒ PrometheusΒ and related monitoring components.
  • x509-certificate-exporter: A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone 🌟 (Recommended)

Policy Controller

  • Kyverno : Kubernetes Native Policy Management
  • OPA Gatekeeper : A customizable cloud native policy controller that helps enforce policies and strengthen governance 🌟 (Recommended)

Resources Orchestrator

  • kro: Kube Resource Orchestrator
  • Kueue: a kubernetes-native system that manages quotas and how jobs consume them.

Secret Management

  • external-secrets: External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets 🌟 (Recommended)
  • vault-secrets-operator: Create Kubernetes secrets from Vault for a secure GitOps based workflow 🌟 (Recommended)

Service Discovery

  • consul: Β A multi-networking tool that offers a fully-featured service mesh solution
  • coredns: CoreDNS is a DNS server that chains plugin 🌟 (Recommended)

Service Mesh

  • Istio: Service Mesh. Simplified. Easily build cloud native workloads securely and reliably with Istio, with or without sidecars.
  • linkerd: AΒ service meshΒ for Kubernetes. It makes running services easier and safer by giving you runtime debugging, observability, reliability, and securityβ€”all without requiring any changes to your code.

Service Proxy

  • envoy : Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures
  • kube-proxy: The Kubernetes network proxy runs on each node 🌟 (Recommended)

Storage Platforms

  • csi-driver-nfs: This driver allows Kubernetes to access NFS server on Linux node
  • Longhorn: Cloud native distributed block storage for Kubernetes 🌟 (Recommended)
  • MinIO: MinIO Object Storage for Kubernetes 🌟 (Recommended)
  • Rook: An open source cloud-native storage orchestrator, providing the platform, framework, and support for Ceph storage to natively integrate with cloud-native environments 🌟 (Recommended)

Threat Intelligence

  • Falco: Detect security threats in real time 🌟 (Recommended)
  • kubescape: Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters
  • openappsec: A machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs.
  • sysdig: Linux system exploration and troubleshooting tool with first class support for containers
  • teleport: The easiest, and most secure way to access and protect all of your infrastructure.
  • Tetragon : Cilium Tetragon component enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement. 🌟 (Recommended)

Utilities Kubernetes

  • kubernetes-reflector: Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates 🌟 (Recommended)

Graph View

Backlinks