Awesome GitHub RepositoriesPrivate Registries

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Kubescape is a Kubernetes security posture management platform designed to scan clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance risks. It functions as a comprehensive security suite incorporating a compliance scanner, a container image vulnerability scanner, an admission controller for policy enforcement, and a runtime security monitor. The platform distinguishes itself through runtime-aware vulnerability filtering, which maps libraries loaded in memory to determine if vulnerabilities are actually reachable. It also integrates with AI assistants via a Mo

This project is a container image registry and server-side storage system designed to house container images, layers, and manifests. It functions as an OCI compliant registry server that adheres to the Open Container Initiative Distribution Specification to store and deliver content over HTTP. The system provides a self-hosted solution for managing private libraries of container images within professional-grade infrastructure. It is designed to enable the development of custom registries by extending a base toolkit with specialized libraries and business logic. The registry covers image dist

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

This project provides a comprehensive guide and set of scripts for deploying and configuring a production-ready Kubernetes cluster from scratch. It centers on establishing a functional environment by installing core management components, storage, and networking across multiple nodes. The implementation emphasizes high availability for the control plane, utilizing layer-4 load balancing and leader election for the API server, scheduler, and controller manager. It further ensures reliability through the deployment of a distributed key-value store for persistent runtime data. The project cover

Coroot is an observability platform and Kubernetes performance monitor that utilizes eBPF to automatically collect metrics, logs, and traces without requiring manual code instrumentation. It functions as an OpenTelemetry trace analyzer and an LLM observability gateway, exposing system health data to large language models through the Model Context Protocol. The platform differentiates itself by combining automated root cause analysis and AI-driven diagnostics to investigate performance regressions. It also includes a cloud cost monitoring tool that attributes infrastructure spending to specifi

Ce projet fournit un blueprint architectural complet et un ensemble d'implémentations pour construire une plateforme-as-a-service (PaaS) sur Kubernetes. Il sert de ressource technique pour déployer des environnements d'orchestration de conteneurs, gérer le cycle de vie complet du développement logiciel et intégrer une chaîne d'outils DevOps complète. L'implémentation met l'accent sur la livraison logicielle automatisée via l'intégration de pipelines de build et de livraison, de registres de conteneurs privés et de systèmes de configuration distribués. Elle permet le découplage des paramètres d'application des images via un gestionnaire de configuration centralisé, permettant des mises à jour spécifiques à l'environnement sans reconstruire les conteneurs. La plateforme couvre un large éventail de capacités cloud-native, incluant l'orchestration réseau des conteneurs, la gestion du trafic de couche 4 et 7, et l'orchestration de microservices avec des stratégies de mise à jour progressive (rolling update). Elle intègre également une stack d'observabilité complète pour la journalisation centralisée, le traçage distribué et la visualisation de métriques de séries temporelles. Le projet est principalement implémenté sous forme d'une collection de scripts shell et de fichiers de configuration pour automatiser le déploiement de la couche d'orchestration et de ses services de support.

KubeOperator est une plateforme complète de gestion de cluster Kubernetes, un orchestrateur d'infrastructure et un gestionnaire multi-cluster. Il fonctionne comme une distribution Kubernetes d'entreprise conçue pour automatiser le déploiement, la mise à l'échelle et la gestion du cycle de vie des clusters de production sur diverses plateformes cloud et machines physiques. La plateforme se distingue par des capacités spécialisées pour les environnements isolés (air-gapped), y compris un moteur d'installation hors ligne qui génère des archives logicielles et gère des registres privés pour des déploiements sécurisés sans internet. Elle fournit également un tableau de bord centralisé pour les opérations de flotte, permettant l'importation de clusters externes et l'orchestration de l'infrastructure à travers différentes régions géographiques et zones de disponibilité. Le système couvre une large surface opérationnelle, y compris le provisionnement automatisé de machines virtuelles, le suivi de l'inventaire matériel et la gestion déclarative du cycle de vie pour le patching et la mise à l'échelle. Il intègre des services de sauvegarde et de récupération, un contrôle d'accès basé sur les rôles avec synchronisation LDAP, et une surveillance complète de la santé et des métriques de performance du cluster. Les tâches administratives et les opérations de cluster sont exécutées via une interface web.

Exegol is an offensive security platform and containerized tooling orchestrator designed to deploy and manage isolated security operations environments. It functions as a workspace manager that provisions pre-configured security images and toolkits within Docker containers to protect host systems from malicious payloads. The platform distinguishes itself by integrating AI security workflow orchestration, allowing AI assistants to discover and trigger security tools through a standardized communication protocol. It further provides remote desktop gateway capabilities, enabling GUI access via X

Watchtower is a Docker container update automator that monitors registries for new image pushes and automatically restarts containers with the latest versions. It functions as a container lifecycle manager, handling the process of bringing running containers up to date without manual intervention. The service includes specialized controls to manage deployment risk and precision, such as image age deferral and deployment cooldowns to protect against buggy releases. It supports image tag pinning to restrict updates to specific version series and can operate as a self-updating service to maintai

Argo CD Image Updater is a tool designed to automate the lifecycle of container images within Kubernetes environments. It monitors container registries for new software versions and automatically updates the corresponding image tags in version control repositories to ensure that running workloads remain current. The system distinguishes itself by maintaining a declarative state through GitOps synchronization, where updated image references are committed directly back to version control. It employs a controller-based reconciliation loop that periodically polls registries for metadata or reacts

Mayastor is a software-defined, cloud-native block storage solution designed to provide high-performance, persistent storage for stateful applications within container orchestration environments. It functions as a distributed storage control plane that decouples application data from physical hardware, enabling dynamic provisioning and management of block volumes across clustered nodes. The platform distinguishes itself by utilizing a user-space storage driver architecture that bypasses kernel overhead to maximize hardware performance. It leverages the NVMe-over-Fabrics protocol to deliver lo