xeusnguyen.xyz

Search

SearchSearch

Recent Notes

See 165 more β†’

Awesome Kubernetes

Dec 23, 2025, 20 min read

Quote

This page is created for purpose store relation to helpful articles, make a some reference link when you can check and understand more about K8s (Kubernetes) and awesome things with this orchestration, but also learning and exploring more about worldwide containerization πŸ”₯

Kubernetes

center

Articles / Documentation / Practicing

Azure Kubernetes Service (AKS)

Advantage Kubernetes Components / Techniques

Do It Yourself (DIYs)

Elastic Kubernetes Service (EKS)

Fundamental

General

Hardware and Resources

Networking (CNI / DNS)

Storage (CSI)

Story and Question

Tips for Configuration

Tools

Troubleshoot

Awesome repositories

Blogs

Certificate & Practice

Operator & Chart

  • Artifacthub : Find, install and publish Cloud Native packages for Kubernetes 🌟 (Recommended)
  • Bitami Helm Chart: Popular applications, provided byΒ Bitnami, ready to launch on Kubernetes 🌟 (Recommended)
  • BJW Helm Chart: Helm template for common application
  • Knative: An Open-Source Enterprise-level solution to build Serverless and Event Driven Applications. Documentation
  • Kubeblocks: Β an open-source Kubernetes operator for databases (more specifically, for stateful applications, including databases and middleware like message queues), enabling users to run and manage multiple types of databases on Kubernetes.
  • MongoDB Community Kubernetes Operator, you can take the look some crd, and configuration with github link like CRD and Samples
  • mongodb-kubernetes-operator : MongoDB Community Kubernetes Operator
  • OperatorHub: Home for the Kubernetes community to share Operators 🌟 (Recommended)
  • Poly Helm Chart: Self-define Helm chart for AI purpose application
  • Rancher Helm Chart: A catalog based on applications from independent software vendors (ISVs). Most of them are SUSE Partners
  • Stakater Application Helm Chart: Generic helm chart for all kind of applications by Stakater 🌟 (Recommended)
  • Strimzi: Strimzi simplifies the process of runningΒ Apache KafkaΒ within a Kubernetes cluster
  • RedHat Communiy Helm Chart: βš“οΈ Red Hat Communities of Practice Helm Charts

Organizations

  • ApeCloud: The community who focus on designing architecture inside Cloud Platform, especially Kubernetes. Author of Kubeblocks
  • AppsCode: Kubernetes-native Data Platform 🌟 (Recommended)
  • Carvel: a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. Author of ytt, kapp-controller
  • Devtron Inc: Software Delivery Workflow For Kubernetes 🌟 (Recommended)
  • DaoCloud: An innovation leader in the cloud-native field 🌟 (Recommended)
  • Kubecost: Organization of Kubecost - a monitoring application which provides real-time cost visibility and insights for teams using Kubernetes, helping you continuously reduce your cloud costs
  • Kubeflow: An open, community driven project to make it easy to deploy and manage an ML stack on Kubernetes
  • Kubernetes CSI: Kubernetes specific Container-Storage-Interface (CSI) components 🌟 (Recommended)
  • Kubernetes: Production-Grade Container Scheduling and Management 🌟 (Recommended)
  • kubernetes-sigs : Org for Kubernetes SIG-related work 🌟 (Recommended)
  • KubeWharf: Developer community legit insane tools for Kubernetes
  • Medik8s: Medik8s (pronounced medicates) aims for automatic detection and recovery of unhealthy k8s nodes
  • Polyaxon: A platform for reproducible and scalable machine learning and deep learning
  • The Helm Project: The package manager for Kubernetes 🌟 (Recommended)
  • VMware Tanzu: Cloud native open source from VMware, almost for Kubernetes, Author of velero
  • Labring: A platform for building the operation system as cloud by Kubernetes, know them via Sealos

Topics

Kubernetes Tools (Cloud Native) (Curious πŸ”­)

center

Agents

  • botkube: An app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices 🌟 (Recommended)
  • kagent: A Kubernetes native framework for building AI agents 🌟 (Recommended)

AI Gateway / API Gateway / Ingress / Load Balalancer

  • AGIC - Application Gateway Ingress Controller: Possible for Azure Kubernetes Service (AKS) customers to leverage Azure’s native Application Gateway L7 load-balancer to expose cloud software to the Internet. Azure Article
  • gateway-api-inference-extension: optimizes self-hosting Generative Models on Kubernetes
  • gloo: The Cloud-Native API Gateway and AI Gateway
  • inlets-operator: Get public TCP LoadBalancers for local Kubernetes clusters
  • Kgateway: The most widely deployed gateway in Kubernetes for microservices and AI agents
  • Kong Ingress Controller: Allows you to run Kong Gateway as a Kubernetes Ingress to handle inbound requests for a Kubernetes cluster
  • kube-vip: Provides Kubernetes clusters with a virtual IP and load balancer for both the control plane (for building a highly-available cluster) and Kubernetes Services of typeΒ LoadBalancerΒ without relying on any external hardware or software.
  • llm-d: a Kubernetes-native distributed inference serving stack providing well-lit paths for anyone to serve large generative AI models at scale
  • MetalLB: A load-balancer implementation for bare metalΒ KubernetesΒ clusters, using standard routing protocols.
  • Nginx Gateway Fabric: Provides an implementation for the Gateway API using NGINX as the data plane.
  • Traefik - ApiGateway: A drop-in replacement for Traefik Proxy, it can do everything Traefik Proxy does, with additional capabilities and support out of the box.
  • wiredoor: Self hosted ingress-as-a-service platform that allows you to expose applications and services running in private or local networks to the internet

Architecture

  • virtual-kubelet: Virtual Kubelet is an open source Kubernetes kubelet implementation.
  • interLink: an abstraction layer for executing Kubernetes pods on remote resources capable of managing container execution lifecycles.

Backup

  • velero: Backup and migrate Kubernetes applications and their persistent volumes
  • trilio: A data protection and backup solution specifically designed for Kubernetes environments

Benchmark / Validation / Utilities Tools

  • kube-bench: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  • kubeconform: A FAST Kubernetes manifests validator, with support for Custom Resources!
  • Instance calculator : Estimate and find the number of max workload can apply for instance
  • silver-surfer: Kubernetes objects api-version compatibility checker and provides migration path for K8s objects and prepare it for cluster upgrades
  • doc.crds.dev: View and explore the documentation about CRD of specific repository 🌟 (Recommended)

Chaos

  • chaos-mesh: A Chaos Engineering Platform for Kubernetes.
  • litmus: Chaos Engineering Framework with cross-cloud support.

Custom Scheduler

  • volcano: a Kubernetes-native batch scheduling system, extending and enhancing the capabilities of the standard kube-scheduler for AI workloads
  • koordinator: A QoS-based scheduling system brings optimal layout and status to workloads such as microservices, web services, big data jobs, AI jobs, etc.

Device Plugins

Dashboard & Cluster Management

  • kubewall: Single-Binary Kubernetes Dashboard with Multi-Cluster Management & AI Integration
  • headlamp: A Kubernetes web UI that is fully-featured, user-friendly and extensible
  • dashboard: General-purpose web UI for Kubernetes clusters
  • Crossplane: An open source Kubernetes extension that transforms your Kubernetes cluster into aΒ universal control plane.
  • GlassKube : An open-source Kubernetes package manager that simplifies package management for Kubernetes
  • kubeapps: A web-based UI for deploying and managing applications in Kubernetes clusters
  • kubeshark: The API traffic analyzer for Kubernetes providing real-time K8s 🌟 (Recommended)
  • lens: Lens - The way the world runs Kubernetes 🌟 (Recommended)

Networking Controller (DNS / VPN/ SSL / Service Discovery)

  • bindy: Bind9 Kubernetes Controller
  • kubevpn: Offers a Cloud Native Dev Environment that connects to kubernetes cluster network.

Global Server Load Balancer (GSLB)

Kubernetes Development Library / Tools

  • devspace: Client-Only Developer Tool for Cloud-Native Development with Kubernetes
  • kooper: A simple Go library to create Kubernetes operators and controllers.
  • kubebuilder: SDK for building Kubernetes APIs using CRDs
  • Operator SDK: component of theΒ Operator Framework, an open source toolkit to manage Kubernetes native applications, called Operators, in an effective, automated, and scalable way.

Kubernetes Hosted

  • K0s: k0s is an open source, all-inclusive Kubernetes distribution, which is configured with all of the features needed to build a Kubernetes cluster.
  • kops: Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management
  • MicroK8s: MicroK8s is a low-ops, minimal production Kubernetes.
  • minikube : minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows
  • Talos Linux : The Kubernetes Operating System
    • cluster-template: A template for deploying a Talos Kubernetes cluster including Flux for GitOps
  • kubevirt: Provides a unified development platform where developers can build, modify, and deploy applications residing in both Application Containers as well as Virtual Machines in a common, shared environment.
  • Sealos: Β cloud operating system distribution based on the Kubernetes kernel, designed for a seamless development lifecycle

Kubernetes in Kubernetes

  • vCluster: Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster
  • k3k: Kubernetes in Kubernetes by Rancher
  • k0smotron: Kubernetes in Kubernetes by k0s

Storage Platform

  • openebs: Β an open-source Container Native Storage solution that provides persistent storage for Kubernetes workloads
  • cubefs: an open-source cloud-native distributed file & object storage system

Multi-Cluster Orchestration

  • Karmada: a Kubernetes management system that enables you to run your cloud-native applications across multiple Kubernetes clusters and clouds, with no changes to your applications.
  • Open Cluster Management (OCM): a powerful, modular, extensible platform for Kubernetes multi-cluster orchestration
  • multicluster-runtime: a Go library to write Kubernetes controllers that reconcile across a dynamic fleet of Kubernetes (or Kubernetes-like) clusters.
  • kubesphere: The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ πŸ–₯ ☁️
  • kubefleet: an open-source Kubernetes multi-cluster application management solution.

Resources Orchestrator

  • kro: Kube Resource Orchestrator
  • Kueue: a kubernetes-native system that manages quotas and how jobs consume them.

Threat Intelligence / Security

  • Falco: Detect security threats in real time 🌟 (Recommended)
  • Kubernetes Goat: An interactive Kubernetes security learning playground
  • kubescape: Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters
  • openappsec: A machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs.
  • sysdig: Linux system exploration and troubleshooting tool with first class support for containers
  • teleport: The easiest, and most secure way to access and protect all of your infrastructure.
  • Tetragon : Cilium Tetragon component enables powerful realtime, eBPF-based Security Observability and Runtime Enforcement. 🌟 (Recommended)

Kubernetes Tools

API Gateway / Ingress Controller / LB / Tunneling

  • AWS Load Balancer Controller: AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster 🌟 (Recommended)
  • Gateway API: Gateway API is an official Kubernetes project focused on L4 and L7 routing in Kubernetes 🌟 (Recommended)
  • Ingress-Nginx Controller : Documentation about Nginx ingress which use for delivery IN/OUT traffic for Kubernetes Cluster 🌟 (Recommended)
  • Traefik - Ingress Controller: A Kubernetes Ingress controller; that is to say, it manages access to cluster services by supporting theΒ IngressΒ specification.
  • ngrok-operator: LeverageΒ ngrokΒ for your ingress in your Kubernetes cluster 🌟 (Recommended)
  • cloudflare-operator: A Kubernetes Operator to create and manage Cloudflare Tunnels and DNS records for (HTTP/TCP/UDP) Service Resources

Autoscaling

  • Keda: Kubernetes Event-driven Autoscaling
  • Kubernetes Autoscaler: Autoscaling components for Kubernetes 🌟 (Recommended)

Configuration Management & Utilities

  • Reloader: A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig 🌟 (Recommended)
  • vals: Helm-like configuration values loader with support for various sources 🌟 (Recommended)
  • kubernetes-reflector: Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates 🌟 (Recommended)

DNS / SSL / Service Discovery

  • cert-manager: Automatically provision and manage TLS certificates in Kubernetes 🌟 (Recommended)
  • external-dns: Configure external DNS servers 🌟 (Recommended)
  • coredns: CoreDNS is a DNS server that chains plugin 🌟 (Recommended)

GPU Scheduler

Kubectl Tools Kit

  • krew: πŸ“¦ Find and install kubectl plugins 🌟 (Recommended)
  • kube-capacity: A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster 🌟 (Recommended)
  • kubectl-node-shell: Exec into node via kubectl 🌟 (Recommended)
  • kubectl-trace: Schedule bpftrace programs on your kubernetes cluster using the kubectl
  • kubectl-tree: kubectl plugin to browse Kubernetes object hierarchies as a tree πŸŽ„
  • kubectl-view-allocations: kubectl plugin to list allocations (cpu, memory, gpu,… X utilization, requested, limit, allocatable,…) 🌟 (Recommended)

Kubernetes Hosted

  • eksctl: The official CLI for Amazon EKS. Website
  • K3s: Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB 🌟 (Recommended)
  • RKE2: Rancher’s enterprise-ready next-generation Kubernetes distribution. It has also been known as RKE Government. 🌟 (Recommended)
  • Kind : kindΒ is a tool for running local Kubernetes clusters using Docker container β€œnodes” 🌟 (Recommended)
  • Kubernetes Official solution : Installing Kubernetes with deployment tools.
    • kubespray: Deploy a Production Ready Kubernetes Cluster
    • kubeadm: Aggregator for issues filed against kubeadm 🌟 (Recommended)
    • kubeadm-ha: Deploy HA Kubernetes with Kubeadm using ansible

Monitoring

  • kube-state-metrics: Add-on agent to generate and expose cluster-level metrics 🌟 (Recommended)
  • metrics-server: Scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines 🌟 (Recommended)
  • OpenSLO: Open specification for defining and expressing service level objectives (SLO)
  • prometheus-operator: AΒ Kubernetes OperatorΒ that provides Kubernetes native deployment and management ofΒ PrometheusΒ and related monitoring components.
  • x509-certificate-exporter: A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone 🌟 (Recommended)

Networking (Proxy, Routing and Polices)

  • kube-router: a turnkey solution for Kubernetes networking with aim to provide operational simplicity and high performance.
  • kube-proxy: component is responsible for implementing aΒ virtual IPΒ mechanism forΒ ServicesΒ ofΒ typeΒ other thanΒ ExternalName 🌟 (Recommended)
  • envoy : Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures

Policy Controller

  • Kyverno : Kubernetes Native Policy Management
  • OPA Gatekeeper : A customizable cloud native policy controller that helps enforce policies and strengthen governance 🌟 (Recommended)

Secret Management

  • external-secrets: External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets 🌟 (Recommended)
  • vault-secrets-operator: Create Kubernetes secrets from Vault for a secure GitOps based workflow 🌟 (Recommended)
  • sealed-secrets: A Kubernetes controller and tool for one-way encrypted Secrets

Service Mesh

  • consul: Β A multi-networking tool that offers a fully-featured service mesh solution
  • Istio: Service Mesh. Simplified. Easily build cloud native workloads securely and reliably with Istio, with or without sidecars. 🌟 (Recommended)
  • linkerd: AΒ service meshΒ for Kubernetes. It makes running services easier and safer by giving you runtime debugging, observability, reliability, and securityβ€”all without requiring any changes to your code.

Storage Platforms

  • NFS CSI driver: This driver allows Kubernetes to access NFS server on Linux node
  • Longhorn: Cloud native distributed block storage for Kubernetes 🌟 (Recommended)
  • MinIO: MinIO Object Storage for Kubernetes 🌟 (Recommended)
  • Rook: An open source cloud-native storage orchestrator, providing the platform, framework, and support for Ceph storage to natively integrate with cloud-native environments 🌟 (Recommended)

Graph View

Backlinks