Filter by
(2)
Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.
18m
100K+
The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI
20m
100K+
A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.
22m
100K+
Certificate signing request agent for integrating cert-manager with Istio
26m
100K+
This project signs and proxies HTTP requests with Sigv4
6h
100K+
The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
20m
100K+
An open source, Google Zanzibar-inspired database for fine-grained authorization.
17m
100K+
2
Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized rate limiting for Envoy and other proxies.
6h
100K+
AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.
27m
100K+
Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.
18m
100K+
Calico CSI driver for secure connections from Kubernetes pods to local daemons.
26m
100K+
Calico Whisker provides a web UI to view network flows in Kubernetes clusters.
26m
100K+
Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.
23m
100K+
Monitoring and observability tool for Kubernetes policy reports
14m
100K+
OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys
19m
100K+
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
15m
100K+
Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.
26m
100K+
Calico fan-out proxy that scales access to the Calico datastore for large clusters.
26m
100K+
A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.
25m
100K+
Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.
6h
100K+
Certificate Authority for the Hyperledger Fabric blockchain network
6h
100K+
2
Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.
18m
100K+
Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.
6h
100K+
An open-source Helm Chart Repository server with support for cloud and local storage backends.
25m
100K+
Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.
21m
100K+
6
A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets
6h
100K+
Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.
19m
100K+
Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.
27m
100K+
A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.
16m
50K+
Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.
17m
50K+