(2)
The Kyverno Policy Reporter watches for PolicyReport Resources. It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
9h
100K+
This project signs and proxies HTTP requests with Sigv4
9h
100K+
Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.
9h
100K+
AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.
9h
100K+
Calico CSI driver for secure connections from Kubernetes pods to local daemons.
3h
100K+
OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys
9h
100K+
An open source, Google Zanzibar-inspired database for fine-grained authorization.
9h
100K+
2
Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.
9h
100K+
Calico Whisker provides a web UI to view network flows in Kubernetes clusters.
9h
100K+
Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.
9h
100K+
A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.
9h
100K+
Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.
9h
100K+
3
Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.
9h
50K+
Certificate Authority for the Hyperledger Fabric blockchain network
9h
50K+
2
Calico fan-out proxy that scales access to the Calico datastore for large clusters.
9h
50K+
The official image for monitoring systems, containers and applications with Netdata.
20h
500M+
571
Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.
3h
50K+
Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.
9h
50K+
Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.
9h
50K+
Cloud-native, platform-agnostic, scalable API Gateway with plugin ecosystem for authentication, rate limiting, and observability. Supports REST, GraphQL, gRPC, and WebSocket protocols with DB-less and declarative configuration modes.
3h
50K+
6
A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.
9h
50K+
An open-source Helm Chart Repository server with support for cloud and local storage backends.
9h
50K+
Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.
9h
50K+
Backend API service for the Calico Whisker network flow visualization UI.
9h
50K+
Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.
9h
50K+
DEPRECATED; Notary server and signer cooperatively handle signing and distribution
2y
5M+
72
A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets
9h
50K+