xeusnguyen.xyz

Search

SearchSearch

Recent Notes

See 148 more β†’

Awesome Kubernetes

Jun 22, 2025, 15 min read

Purpose

This page is created for purpose store relation to helpful articles, make a some reference link when you can check and understand more about K8s (Kubernetes) and awesome things with this orchestration, but also learning and exploring more about worldwide containerization πŸ”₯

Kubernetes

center

Articles / Documentation / Practicing

Azure Kubernetes Service (AKS)

Container Runtime (CRI)

Do It Yourself (DIYs)

eBPF

Elastic Kubernetes Service (EKS)

Fundamental

General

Hardware and Resources

Networking (CNI)

Storage (CSI)

Story and Question

Tips for Configuration

Tools

Troubleshoot

Awesome repositories

Blogs

Certificate & Practice

Operator & Chart

  • Artifacthub : Find, install and publish Cloud Native packages for Kubernetes 🌟 (Recommended)
  • Bitami Hem Chart: Popular applications, provided byΒ Bitnami, ready to launch on Kubernetes 🌟 (Recommended)
  • BJW Helm Chart: Helm template for common application
  • Knative: An Open-Source Enterprise-level solution to build Serverless and Event Driven Applications. Documentation
  • Kubeblocks: Β an open-source Kubernetes operator for databases (more specifically, for stateful applications, including databases and middleware like message queues), enabling users to run and manage multiple types of databases on Kubernetes.
  • MongoDB Community Kubernetes Operator, you can take the look some crd, and configuration with github link like CRD and Samples
  • mongodb-kubernetes-operator : MongoDB Community Kubernetes Operator
  • OperatorHub: Home for the Kubernetes community to share Operators 🌟 (Recommended)
  • Poly Helm Chart: Self-define Helm chart for AI purpose application
  • Rancher Helm Chart: A catalog based on applications from independent software vendors (ISVs). Most of them are SUSE Partners
  • Strimzi: Strimzi simplifies the process of runningΒ Apache KafkaΒ within a Kubernetes cluster

Organizations

  • ApeCloud: The community who focus on designing architecture inside Cloud Platform, especially Kubernetes. Author of Kubeblocks
  • AppsCode: Kubernetes-native Data Platform 🌟 (Recommended)
  • Carvel: a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. Author of ytt, kapp-controller
  • Devtron Inc: Software Delivery Workflow For Kubernetes 🌟 (Recommended)
  • DaoCloud: An innovation leader in the cloud-native field 🌟 (Recommended)
  • Kubecost: Organization of Kubecost - a monitoring application which provides real-time cost visibility and insights for teams using Kubernetes, helping you continuously reduce your cloud costs
  • Kubeflow: An open, community driven project to make it easy to deploy and manage an ML stack on Kubernetes
  • Kubernetes CSI: Kubernetes specific Container-Storage-Interface (CSI) components 🌟 (Recommended)
  • Kubernetes: Production-Grade Container Scheduling and Management 🌟 (Recommended)
  • kubernetes-sigs : Org for Kubernetes SIG-related work 🌟 (Recommended)
  • KubeWharf: Developer community legit insane tools for Kubernetes
  • Medik8s: Medik8s (pronounced medicates) aims for automatic detection and recovery of unhealthy k8s nodes
  • Polyaxon: A platform for reproducible and scalable machine learning and deep learning
  • The Helm Project: The package manager for Kubernetes 🌟 (Recommended)
  • VMware Tanzu: Cloud native open source from VMware, almost for Kubernetes, Author of velero

Topics

Kubernetes Tools

API Gateway / Ingress Controller / LB

  • AGIC - Application Gateway Ingress Controller: Possible for Azure Kubernetes Service (AKS) customers to leverage Azure’s native Application Gateway L7 load-balancer to expose cloud software to the Internet. Azure Article
  • AWS Load Balancer Controller: AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster 🌟 (Recommended)
  • Gateway API: Gateway API is an official Kubernetes project focused on L4 and L7 routing in Kubernetes
  • Ingress-Nginx Controller : Documentation about Nginx ingress which use for delivery IN/OUT traffic for Kubernetes Cluster 🌟 (Recommended)
  • Kong Ingress Controller: Allows you to run Kong Gateway as a Kubernetes Ingress to handle inbound requests for a Kubernetes cluster 🌟 (Recommended)
  • kube-vip: Provides Kubernetes clusters with a virtual IP and load balancer for both the control plane (for building a highly-available cluster) and Kubernetes Services of typeΒ LoadBalancerΒ without relying on any external hardware or software.
  • MetalLB: A load-balancer implementation for bare metalΒ KubernetesΒ clusters, using standard routing protocols.
  • Nginx Gateway Fabric: Provides an implementation for the Gateway API using NGINX as the data plane.
  • Traefik - ApiGateway: A drop-in replacement for Traefik Proxy, it can do everything Traefik Proxy does, with additional capabilities and support out of the box.
  • Traefik - Ingress Controller: A Kubernetes Ingress controller; that is to say, it manages access to cluster services by supporting theΒ IngressΒ specification.

Autoscaling

  • Keda: Kubernetes Event-driven Autoscaling
  • Kubernetes Autoscaler: Autoscaling components for Kubernetes 🌟 (Recommended)

Agents

  • botkube: An app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices 🌟 (Recommended)
  • kagent: A Kubernetes native framework for building AI agents 🌟 (Recommended)

Backup

  • velero: Backup and migrate Kubernetes applications and their persistent volumes
  • trilio: A data protection and backup solution specifically designed for Kubernetes environments

Benchmark and Validation

  • kube-bench: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  • kubeconform: A FAST Kubernetes manifests validator, with support for Custom Resources!
  • Instance calculator : Estimate and find the number of max workload can apply for instance
  • silver-surfer: Kubernetes objects api-version compatibility checker and provides migration path for K8s objects and prepare it for cluster upgrades

Chaos

  • chaos-mesh: A Chaos Engineering Platform for Kubernetes.
  • litmus: Chaos Engineering Framework with cross-cloud support.

Cluster Management

  • Crossplane: An open source Kubernetes extension that transforms your Kubernetes cluster into aΒ universal control plane.
  • GlassKube : An open-source Kubernetes package manager that simplifies package management for Kubernetes
  • kubeapps: A web-based UI for deploying and managing applications in Kubernetes clusters
  • kubeshark: The API traffic analyzer for Kubernetes providing real-time K8s 🌟 (Recommended)
  • lens: Lens - The way the world runs Kubernetes 🌟 (Recommended)

Configuration Management

  • Reloader: A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig 🌟 (Recommended)
  • vals: Helm-like configuration values loader with support for various sources 🌟 (Recommended)

Development Environment

  • devspace: The Fastest Developer Tool for Kubernetes

Development Library

  • kooper: A simple Go library to create Kubernetes operators and controllers.
  • kubebuilder: SDK for building Kubernetes APIs using CRDs

DNS and SSL

  • cert-manager: Automatically provision and manage TLS certificates in Kubernetes 🌟 (Recommended)
  • external-dns: Configure external DNS servers

GPU Scheduler

Kubectl Tools Kit

  • krew: πŸ“¦ Find and install kubectl plugins 🌟 (Recommended)
  • kube-capacity: A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster 🌟 (Recommended)
  • kubectl-node-shell: Exec into node via kubectl 🌟 (Recommended)
  • kubectl-trace: Schedule bpftrace programs on your kubernetes cluster using the kubectl
  • kubectl-tree: kubectl plugin to browse Kubernetes object hierarchies as a tree πŸŽ„
  • kubectl-view-allocations: kubectl plugin to list allocations (cpu, memory, gpu,… X utilization, requested, limit, allocatable,…) 🌟 (Recommended)

Kubernetes Hosted

  • eksctl: The official CLI for Amazon EKS. Website
  • K0s: k0s is an open source, all-inclusive Kubernetes distribution, which is configured with all of the features needed to build a Kubernetes cluster.
  • K3s: Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB 🌟 (Recommended)
  • Kind : kindΒ is a tool for running local Kubernetes clusters using Docker container β€œnodes” 🌟 (Recommended)
  • Kubernetes Goat: An interactive Kubernetes security learning playground
  • Kubernetes Official solution : Installing Kubernetes with deployment tools. Such as: kubespray, kubeadm 🌟 (Recommended)
  • MicroK8s: MicroK8s is a low-ops, minimal production Kubernetes.
  • minikube : minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows
  • Talos Linux : The Kubernetes Operating System
    • cluster-template: A template for deploying a Talos Kubernetes cluster including Flux for GitOps
  • kubevirt: Provides a unified development platform where developers can build, modify, and deploy applications residing in both Application Containers as well as Virtual Machines in a common, shared environment.

Monitoring

  • kube-state-metrics: Add-on agent to generate and expose cluster-level metrics 🌟 (Recommended)
  • metrics-server: Scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines 🌟 (Recommended)
  • OpenSLO: Open specification for defining and expressing service level objectives (SLO)
  • prometheus-operator: AΒ Kubernetes OperatorΒ that provides Kubernetes native deployment and management ofΒ PrometheusΒ and related monitoring components.
  • x509-certificate-exporter: A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone 🌟 (Recommended)

Policy Controller

  • Kyverno : Kubernetes Native Policy Management
  • OPA Gatekeeper : A customizable cloud native policy controller that helps enforce policies and strengthen governance 🌟 (Recommended)

Resources Orchestrator

  • kro: Kube Resource Orchestrator
  • Kueue: a kubernetes-native system that manages quotas and how jobs consume them.

Secret Management

  • external-secrets: External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets 🌟 (Recommended)
  • vault-secrets-operator: Create Kubernetes secrets from Vault for a secure GitOps based workflow 🌟 (Recommended)

Service Discovery

  • consul: Β A multi-networking tool that offers a fully-featured service mesh solution
  • coredns: CoreDNS is a DNS server that chains plugin 🌟 (Recommended)

Service Mesh

  • Istio: Service Mesh. Simplified. Easily build cloud native workloads securely and reliably with Istio, with or without sidecars.
  • linkerd: AΒ service meshΒ for Kubernetes. It makes running services easier and safer by giving you runtime debugging, observability, reliability, and securityβ€”all without requiring any changes to your code.

Service Proxy

  • envoy : Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures
  • kube-proxy: The Kubernetes network proxy runs on each node 🌟 (Recommended)

Storage Platforms

  • csi-driver-nfs: This driver allows Kubernetes to access NFS server on Linux node
  • Longhorn: Cloud native distributed block storage for Kubernetes 🌟 (Recommended)
  • MinIO: MinIO Object Storage for Kubernetes 🌟 (Recommended)
  • Rook: An open source cloud-native storage orchestrator, providing the platform, framework, and support for Ceph storage to natively integrate with cloud-native environments 🌟 (Recommended)

Threat Intelligence

  • Falco: Detect security threats in real time 🌟 (Recommended)
  • kubescape: Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters
  • openappsec: A machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs.
  • sysdig: Linux system exploration and troubleshooting tool with first class support for containers
  • teleport: The easiest, and most secure way to access and protect all of your infrastructure.
  • Tetragon : Cilium Tetragon component enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement. 🌟 (Recommended)

Utilities Kubernetes

  • kubernetes-reflector: Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates 🌟 (Recommended)

Graph View

Backlinks