(2)
A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets
9h
50K+
CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.
3h
50K+
A container management platform built for organizations that deploy containers in production.
18h
100M+
442
Handshake service for kernel TLS consumers
9h
50K+
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
9h
50K+
Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code
9h
50K+
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
9h
50K+
OPA REST server that enforces Rego migration policies for the Forklift VM migration operator.
9h
50K+
Pinniped CLI is a command-line utility for interacting with Pinniped
9h
50K+
Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh
9h
50K+
Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.
9h
10K+
Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.
1m
100M+
32
Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.
10d
1M+
66
Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.
9h
10K+
Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.
9h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.
9h
10K+
The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.
3h
10K+
Clustered in-memory database engine compatible with open source Redis by Redis Labs
3d
100M+
47
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.
9h
10K+
Portainer BE - a fully featured service delivery platform for containerized applications
6d
100M+
147
Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.
9h
10K+
First-class integrations between Vault and Kubernetes.
2m
50M+
20
Consul is a datacenter runtime that provides service discovery, configuration, and orchestration.
5d
50M+
4