Projects sharing features with Vcluster

Tke is a container management platform that centralizes the administration, monitoring, and security of multiple Kubernetes clusters through a graphical console and command-line interfaces. It provides multi-tenant infrastructure capabilities that enforce security boundaries and resource isolation between separate teams and workloads across diverse environments. The platform includes cross-cluster project management by grouping multiple namespaces under unified project containers, alongside visual application deployment tools that run and edit workloads via graphical editors and configuration

Kubero is a self-hosted Platform as a Service (PaaS) that simplifies the deployment, scaling, and management of containerized applications on Kubernetes. It functions as an application manager, CI/CD orchestrator, and multi-tenant manager, allowing users to run workloads without writing manual configuration files. The platform distinguishes itself through automated image synthesis, transforming source code from Git repositories into deployable containers via buildpacks, Dockerfiles, or nixpacks. It implements a GitOps delivery model with automated pipelines that trigger builds on push events

Pinot is a distributed, columnar analytical database designed for high-concurrency, low-latency query processing. It functions as a real-time OLAP datastore, enabling interactive, user-facing analytics by ingesting and querying massive datasets from both streaming and batch sources. The system architecture relies on a centralized controller for cluster coordination and a distributed segment-based storage model to ensure horizontal scalability. The platform distinguishes itself through a hybrid ingestion pipeline that unifies real-time event streams and historical batch data into a single quer

eksctl is a command-line tool for provisioning, managing, and deleting managed Kubernetes clusters on Amazon EKS. It functions as a cloud infrastructure automator and cluster provisioner that creates the control plane, worker nodes, and necessary cloud networking for Kubernetes environments. The tool provides orchestration for hybrid cloud environments, integrating on-premises and edge infrastructure into a managed cloud cluster. It handles the specialized networking and credential provisioning required to link remote nodes with a cloud control plane. The project covers broad administrative

kops is a Kubernetes cluster provisioner and lifecycle manager designed to automate the creation, maintenance, and destruction of production-grade clusters on cloud infrastructure. It functions as a declarative infrastructure manager, synchronizing the live state of a cluster with versioned manifests stored in remote object storage to ensure idempotent operations. The project distinguishes itself by offering comprehensive automation for the entire cluster lifecycle, including high-availability control plane deployment, incremental rolling updates, and automated version upgrades. It also serve

This project is a comprehensive enterprise architecture for building multi-tenant distributed systems, implemented as a Spring Cloud microservices platform. It provides a complete framework for managing microservices, focusing on multi-tenant data architecture and centralized identity provision. The platform is distinguished by its integrated approach to identity and security, utilizing an OAuth2 identity provider to manage single sign-on, role-based access control, and JWT token issuance across distributed services. It further separates organizational boundaries through multi-tenant data iso

Mimir is a multi-tenant time series database and distributed metrics store designed for scalable telemetry. It serves as a Prometheus compatible backend, providing long-term storage and a scalable query engine for massive volumes of time-series data. The system is built for multi-tenant observability, isolating telemetry data and resource limits for independent teams or organizations within a single cluster. It ensures high availability and durability by sharding and replicating data across a distributed cluster, utilizing object storage for persistence to eliminate external database dependen

This project provides the continuous integration infrastructure and end-to-end test orchestration required for the Kubernetes project. It serves as a specialized framework for managing CI pipelines, cloud resource leasing, and repository automation to validate core functionality and API stability. The system differentiates itself through a dedicated cloud resource manager that leases isolated project pools to ensure consistent test environments and a monitoring system that analyzes historical test outcomes to identify regressions and flaky tests. It also includes a GitHub workflow automator u

Jeesite is a full-stack low-code development framework designed for building enterprise administrative portals using Spring Boot, MyBatis, and Vue. It functions as a comprehensive platform for creating administrative dashboards with integrated role-based access control and organizational data permission systems. The framework distinguishes itself through a combination of automated CRUD code generation and an integrated RAG platform that connects large language models to enterprise data via vector stores. It further incorporates a BPMN-based workflow engine to automate complex business process

ClearML is a comprehensive MLOps platform designed to manage the entire machine learning lifecycle. It functions as an experiment tracking tool, a data versioning system, and a pipeline orchestrator, while providing infrastructure for GPU cluster management and model serving. The platform is distinguished by its ability to handle hybrid-cloud compute scheduling and fractional GPU allocation, allowing multiple workloads to share a single hardware accelerator. It employs a metadata-based approach to data versioning, using virtual views to track large datasets and artifacts without duplicating r

Storm is a distributed stream processing framework designed to execute unbounded computations across a cluster to process real-time data streams. It functions as a data pipeline orchestrator that allows users to define and deploy declarative data flow graphs connecting streaming sources to processing components. The system operates as a multi-tenant distributed compute engine that isolates workloads and limits resource usage across shared clusters using dedicated pools and access control. It is also a secure distributed processing engine that employs encrypted node communication and SSL-secur

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Dinky is a real-time data platform for developing, deploying, and operating streaming applications based on Apache Flink. It functions as a SQL streaming IDE and a real-time data pipeline orchestrator, providing a web-based environment for writing and verifying queries with integrated logic plan visualization and lineage tracking. The platform acts as a distributed cluster manager, allowing the registration, monitoring, and administration of multiple processing clusters from a centralized interface. It also serves as a change data capture integration tool, synchronizing real-time database cha

Util is a comprehensive development framework for .NET designed to implement layered architectures and domain driven design. It provides a toolkit of base classes and tools for building full stack applications, specifically focusing on the creation of backend admin frameworks and management interfaces. The project distinguishes itself through a boilerplate generator that produces the necessary types and classes to standardize repetitive architectural patterns. It also includes a micro-frontend orchestrator that enables the splitting of large frontend modules into independent projects for sepa

This project is a production-ready starter kit and boilerplate for building multi-tenant software-as-a-service applications using .NET and React. It provides a multi-tenant application framework and a cloud-native infrastructure kit designed to support scalable cloud services. The project distinguishes itself through a modular monolith architecture that organizes business logic into isolated bounded contexts to prevent code entanglement. It implements comprehensive SaaS identity management, including role-based access control, account impersonation, and strict tenant data isolation across the

Gitkube is a Kubernetes-native CI/CD controller and container image builder that automates the deployment of applications directly within a cluster. It functions as a GitOps deployment engine that synchronizes cluster state with version control repositories, allowing source code to be compiled into container images and deployed upon git push events. The system focuses on secure, multi-tenant resource management by mapping specific git repositories to dedicated Kubernetes namespaces. It utilizes an identity verification layer based on cryptographic SSH keys and role-based access control to aut

Hibernate ORM is a Java object-relational mapper and a full implementation of the Jakarta Persistence API. It serves as a SQL database abstraction layer that translates Java object models into relational database schemas to manage data persistence and lifecycles. The framework distinguishes itself with a multi-tenant data isolation framework for separating customer data within a single database instance. It also features a database schema generator that automatically produces and updates relational structures based on entity mappings. The system covers broad capability areas including transa

Remotely is a remote desktop management suite and multi-tenant device orchestrator designed for organizing users and machines into isolated organizations. It serves as a centralized system for controlling remote screens, executing scripts on distant machines, and managing remote support ticketing. The platform distinguishes itself through a dedicated remote session archiver that records and saves desktop control sessions to a central server for auditing and security reviews. It also includes a public-facing support portal where end users submit requests that trigger notifications on an admini

Engine is a content management system built with Ruby that operates as a headless content management platform and multi-tenant website hosting system. It manages multiple distinct websites and their isolated configurations from a single centralized software installation, while exposing programmatic endpoints to administer websites and custom data types remotely. The platform relies on schema-driven content modeling to define custom data structures and user interfaces dynamically from configuration schemas rather than hardcoded database tables. Dynamic web pages and structured content are rend

Meshery is a service mesh management plane and cloud native infrastructure orchestrator. It provides a visual design-as-code environment for modeling microservices and infrastructure components through declarative blueprints, functioning as a centralized platform for designing, deploying, and managing service mesh infrastructure. The platform is distinguished by its ability to translate visual designs into active deployments and its use of gRPC-based adapters to integrate with diverse infrastructure providers. It features a multi-tenant architecture that manages shared workspaces and role-bas

OceanBase is a distributed SQL database designed for high availability and strong consistency across multiple nodes and regions. It functions as a hybrid transactional and analytical processing engine, allowing real-time analytics and transactions to execute on a single data copy. The system also serves as a vector database engine for indexing and querying vector data to power semantic search and recommendation systems. The platform features native compatibility layers for MySQL and Oracle, enabling the migration of legacy workloads without rewriting SQL code. It utilizes a Paxos-based distri

OpenShift Origin is a Kubernetes distribution platform that extends Kubernetes with integrated security, multi-tenancy, and application lifecycle management for enterprise container orchestration. It functions as a multi-tenant container orchestrator that enforces per-project security policies, resource quotas, and SELinux isolation for shared cluster environments. The platform includes a Source-to-Image builder that creates container images directly from application source code using Dockerfiles or buildpacks without external build servers, and an Operator Lifecycle Manager that installs and

Opal is a policy distribution engine and real-time authorization data synchronizer. It serves as a management plane for deploying and monitoring distributed policy engines, such as OPA and Cedar, across microservices architectures. The project centralizes the administration of policies and data while deploying decentralized decision points. The system distinguishes itself by decoupling policy code, managed via version control, from authorization data retrieved from external databases and APIs. It uses a pub/sub-based state distribution model to push immediate updates to agents via WebSockets

HAMi is a hardware orchestration and virtualization system designed to manage accelerators within Kubernetes. It functions as a device plugin that partitions physical hardware into isolated virtual slices, enabling multiple containers to share a single device through enforced memory limits and compute quotas. The project provides a virtualization manager and a heterogeneous compute scheduler that distributes tasks across diverse accelerator types. It uses packing and topology policies to optimize workload placement and allows for specific hardware targeting using unique device identifiers. T

This project is a comprehensive educational curriculum designed to teach the fundamentals of container orchestration and infrastructure automation. It provides a structured learning path for mastering the lifecycle management of containerized applications, covering the core concepts of declarative resource definitions, control-loop-based reconciliation, and distributed cluster state management. The course distinguishes itself by focusing on practical, hands-on implementation of modern DevOps practices. It guides users through the integration of GitOps workflows for state synchronization, the

This project is a reference implementation providing a collection of practical examples for data access patterns and repository abstractions within the Spring Data ecosystem. It serves as a comprehensive showcase for implementing consistent data layers across various relational and non-relational databases. The repository specifically demonstrates multi-store persistence by integrating relational, document, and vector databases within a single application. It includes implementations for vector search to manage high-dimensional embeddings and similarity searches across different database tech

Tenancy is a multi-tenancy framework for Laravel applications designed to support SaaS architectures. It provides a comprehensive system for implementing tenant data isolation, allowing developers to choose between dedicated multi-database schemas or single-database scoping via traits. The project distinguishes itself through a robust resource isolation model that extends beyond the database to include filesystems, Redis stores, and caches. It features an event-driven lifecycle orchestrator for automating tenant provisioning and a flexible identification middleware that resolves tenants via d