Awesome GitHub RepositoriesPrivate Registries

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Kubescape is a Kubernetes security posture management platform designed to scan clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance risks. It functions as a comprehensive security suite incorporating a compliance scanner, a container image vulnerability scanner, an admission controller for policy enforcement, and a runtime security monitor. The platform distinguishes itself through runtime-aware vulnerability filtering, which maps libraries loaded in memory to determine if vulnerabilities are actually reachable. It also integrates with AI assistants via a Mo

This project is a container image registry and server-side storage system designed to house container images, layers, and manifests. It functions as an OCI compliant registry server that adheres to the Open Container Initiative Distribution Specification to store and deliver content over HTTP. The system provides a self-hosted solution for managing private libraries of container images within professional-grade infrastructure. It is designed to enable the development of custom registries by extending a base toolkit with specialized libraries and business logic. The registry covers image dist

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

This project provides a comprehensive guide and set of scripts for deploying and configuring a production-ready Kubernetes cluster from scratch. It centers on establishing a functional environment by installing core management components, storage, and networking across multiple nodes. The implementation emphasizes high availability for the control plane, utilizing layer-4 load balancing and leader election for the API server, scheduler, and controller manager. It further ensures reliability through the deployment of a distributed key-value store for persistent runtime data. The project cover

Coroot is an observability platform and Kubernetes performance monitor that utilizes eBPF to automatically collect metrics, logs, and traces without requiring manual code instrumentation. It functions as an OpenTelemetry trace analyzer and an LLM observability gateway, exposing system health data to large language models through the Model Context Protocol. The platform differentiates itself by combining automated root cause analysis and AI-driven diagnostics to investigate performance regressions. It also includes a cloud cost monitoring tool that attributes infrastructure spending to specifi

Dieses Projekt bietet einen umfassenden Architektur-Blueprint und Implementierungssatz für den Aufbau einer Platform-as-a-Service auf Kubernetes. Es dient als technische Ressource für die Bereitstellung von Container-Orchestrierungsumgebungen, die Verwaltung des gesamten Softwareentwicklungs-Lebenszyklus und die Integration einer vollständigen DevOps-Toolchain. Die Implementierung betont die automatisierte Softwarebereitstellung durch die Integration von Build- und Delivery-Pipelines, privaten Container-Registries und verteilten Konfigurationssystemen. Es ermöglicht die Entkopplung von Anwendungseinstellungen von Images über einen zentralen Konfigurationsmanager, was umgebungsspezifische Updates ohne Neuerstellung von Containern erlaubt. Die Plattform deckt ein breites Spektrum Cloud-nativer Funktionen ab, einschließlich Container-Netzwerk-Orchestrierung, Layer-4- und Layer-7-Traffic-Management sowie Microservice-Orchestrierung mit Rolling-Update-Strategien. Zudem integriert es einen vollständigen Observability-Stack für zentralisiertes Logging, Distributed Tracing und die Visualisierung von Zeitreihenmetriken. Das Projekt ist primär als Sammlung von Shell-Skripten und Konfigurationsdateien implementiert, um die Bereitstellung der Orchestrierungsschicht und der unterstützenden Dienste zu automatisieren.

KubeOperator ist eine umfassende Kubernetes-Cluster-Management-Plattform, Infrastruktur-Orchestrator und Multi-Cluster-Manager. Sie fungiert als Enterprise-Kubernetes-Distribution, die darauf ausgelegt ist, das Deployment, die Skalierung und das Lifecycle-Management von Produktionsclustern über verschiedene Cloud-Plattformen und physische Maschinen hinweg zu automatisieren. Die Plattform zeichnet sich durch spezialisierte Funktionen für Air-Gapped-Umgebungen aus, einschließlich einer Offline-Installations-Engine, die Software-Archive generiert und private Registries für sichere, nicht internetbasierte Deployments verwaltet. Sie bietet zudem ein zentrales Dashboard für Flottenoperationen, das den Import externer Cluster und die Orchestrierung der Infrastruktur über verschiedene geografische Regionen und Verfügbarkeitszonen hinweg ermöglicht. Das System deckt eine breite operative Oberfläche ab, einschließlich automatisierter Bereitstellung virtueller Maschinen, Hardware-Inventarverfolgung und deklarativem Lifecycle-Management für Patching und Skalierung. Es integriert Backup- und Wiederherstellungsdienste, rollenbasierte Zugriffskontrolle mit LDAP-Synchronisation und umfassende Überwachung für Cluster-Gesundheit und Leistungsmetriken. Administrative Aufgaben und Cluster-Operationen werden über eine webbasierte Schnittstelle ausgeführt.

Exegol is an offensive security platform and containerized tooling orchestrator designed to deploy and manage isolated security operations environments. It functions as a workspace manager that provisions pre-configured security images and toolkits within Docker containers to protect host systems from malicious payloads. The platform distinguishes itself by integrating AI security workflow orchestration, allowing AI assistants to discover and trigger security tools through a standardized communication protocol. It further provides remote desktop gateway capabilities, enabling GUI access via X

Watchtower is a Docker container update automator that monitors registries for new image pushes and automatically restarts containers with the latest versions. It functions as a container lifecycle manager, handling the process of bringing running containers up to date without manual intervention. The service includes specialized controls to manage deployment risk and precision, such as image age deferral and deployment cooldowns to protect against buggy releases. It supports image tag pinning to restrict updates to specific version series and can operate as a self-updating service to maintai

Argo CD Image Updater is a tool designed to automate the lifecycle of container images within Kubernetes environments. It monitors container registries for new software versions and automatically updates the corresponding image tags in version control repositories to ensure that running workloads remain current. The system distinguishes itself by maintaining a declarative state through GitOps synchronization, where updated image references are committed directly back to version control. It employs a controller-based reconciliation loop that periodically polls registries for metadata or reacts

Mayastor is a software-defined, cloud-native block storage solution designed to provide high-performance, persistent storage for stateful applications within container orchestration environments. It functions as a distributed storage control plane that decouples application data from physical hardware, enabling dynamic provisioning and management of block volumes across clustered nodes. The platform distinguishes itself by utilizing a user-space storage driver architecture that bypasses kernel overhead to maximize hardware performance. It leverages the NVMe-over-Fabrics protocol to deliver lo