kubero-dev/kubero
Kubero
Kubero is a self-hosted Platform as a Service (PaaS) that simplifies the deployment, scaling, and management of containerized applications on Kubernetes. It functions as an application manager, CI/CD orchestrator, and multi-tenant manager, allowing users to run workloads without writing manual configuration files.
The platform distinguishes itself through automated image synthesis, transforming source code from Git repositories into deployable containers via buildpacks, Dockerfiles, or nixpacks. It implements a GitOps delivery model with automated pipelines that trigger builds on push events and provision ephemeral review environments for pull requests.
Beyond deployment, it provides integrated infrastructure management for provisioning databases and caches through a graphical interface. The system includes multi-tenant isolation using namespaces, role-based access control with OAuth2 authentication, and automated SSL certificate management. Additional capabilities cover resource scaling, application health monitoring, and the attachment of persistent storage volumes.
The platform can be installed on local Kubernetes clusters or provisioned on supported cloud providers using a dedicated CLI and web-based management console.
Features
- Containerized Application Deployments - Deploys and manages containerized applications on Kubernetes clusters without requiring manual configuration files.
- Kubernetes Application Deployments - Simplifies the deployment and management of containerized applications on Kubernetes without requiring manual configuration files.
- Review Environments - Creates isolated application instances for pull requests to validate code changes before merging.
- CI/CD Orchestration - Orchestrates the automated building and deployment of container images from Git repositories into Kubernetes.
- Buildpack-Based Synthesis - Transforms source code into deployable container images using buildpacks, nixpacks, or Dockerfiles automatically.
- Container CI/CD Pipelines - Automates the build and deployment process by listening for push events from external git providers.
- Container Deployment - Fetches source code from Git and runs it as a container using a specified build image.
- Automated Image Synthesis - Automates the transformation of source code into deployable container images using buildpacks, Dockerfiles, or nixpacks.
- Image Generation - Creates container images from source code before pushing them to remote registries.
- Custom Resource Definitions - Manages application lifecycles and infrastructure by mapping user intent to Kubernetes custom resource definitions.
- Source Builds - Compiles source code into deployable packages using Dockerfiles, Nixpacks, or buildpacks.
- Deployment Source Managers - Links external git providers via access tokens to automate deployments upon push or pull request events.
- Backend-as-a-Service Platforms - Attaches pre-configured data stores or messaging services to an application via a configuration form.
- Git-Based Deployment - Synchronizes application environments with Git repositories to treat version control as the single source of truth.
- Git-Based Deployment Automations - Triggers automatic builds and deployments from Git providers like GitHub, GitLab, or Bitbucket.
- GitOps Automation - Implements automated workflows that trigger application builds and deployments based on changes in Git repositories.
- Infrastructure Add-ons - Installs third-party or built-in services to provide extended functionality or database storage.
- Infrastructure as Code - Defines application pipelines and environment configurations as version-controlled custom resource objects.
- Ingress Controllers - Routes external traffic to application pods via an ingress controller while keeping worker pods private.
- Kubernetes Tenant Isolation - Isolates resources and controls user access for different teams using Kubernetes namespaces and role-based access control.
- Self-Hosted PaaS Platforms - Provides a self-hosted platform for developers to provision databases, scale resources, and manage SSL certificates.
- Identity Authentication - Secures platform login and user access via external identity providers like Google, GitHub, or Microsoft.
- Namespace-Based Isolation - Separates user groups and organizational resources using Kubernetes namespaces to ensure secure multi-tenancy.
- Role-Based Access Control - Implements role-based access control to manage user permissions and secure multi-user collaboration.
- Inactivity-Based Pausing - Reduces infrastructure costs by automatically turning off containers during periods of inactivity.
- Review Environments - Spins up and cleans up isolated application environments based on pull request status.
- Database Provisioners - Provides a graphical interface for deploying and attaching managed database and cache add-ons to applications.
- CLI Administration Tools - Creates clusters and manages deployments through scripts or manual commands using a CLI.
- Operator-Based Extensions - Installs and configures functional add-ons using operators managed through a user interface.
- Review Environments - Provisions ephemeral, isolated application instances for validating pull requests before they are merged.
- Management Consoles - Performs administrative tasks and accesses pods through a browser-based interface.
- Auto Scaling - Dynamically adjusts the number of application instances based on traffic to optimize resource costs.
- Infrastructure Provisioning and Management - Provides a graphical interface and tools for provisioning and managing the lifecycle of cloud-based infrastructure resources.
- Cloud Provisioning - Creates and manages Kubernetes clusters on supported cloud providers using provider credentials.
- Vertical Application Scaling - Adjusts resource allocation for applications through both vertical and horizontal scaling based on demand.
- Container Registry Management - Pushes built images to public or local registries using secure authentication.
- Operator-Based Lifecycles - Automates the deployment and configuration of supporting services like databases using Kubernetes operators.
- Deployment Managers - Provides a graphical interface to configure and execute application deployment pipelines and webhooks.
- Infrastructure as Code - Defines and applies application pipelines as infrastructure as code using custom resource definitions.
- Database Deployments - Deploys and manages pre-configured database instances like PostgreSQL and MongoDB within Kubernetes using operators.
- Pre-built Image Deployments - Deploys images already stored in a registry by integrating with external build environments.
- SSL Termination Proxies - Encrypts traffic between clients and hosted applications through automated SSL termination.
- Template-Based Deployment - Launches pre-configured applications using a library of ready-to-use templates to accelerate setup.
- Multi-Tenant Identity Management - Implements an administration layer with OAuth2 authentication and isolated namespaces to ensure secure multi-tenancy.
- Identity Management - Secures access to the management interface and hosted applications via external OAuth2 identity providers.
- Multi-Tenant Isolation - Ensures secure separation of workloads and resources for different user groups within the shared infrastructure.
- SSL Certificate Automation - Automatically issues and renews SSL certificates to ensure secure HTTPS communication for hosted applications.
- CLI System Management - Installs and manages the system and its underlying resources using a command line tool.
- Automation and CI/CD - Self-hosted PaaS alternative implementing GitOps workflows.
- Platform as a Service - GitOps-based PaaS for Kubernetes environments.
- Backend and Infrastructure - Kubernetes-based PaaS for application management.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
