Kubero

Kubero is a self-hosted Platform as a Service (PaaS) that simplifies the deployment, scaling, and management of containerized applications on Kubernetes. It functions as an application manager, CI/CD orchestrator, and multi-tenant manager, allowing users to run workloads without writing manual configuration files.

The platform distinguishes itself through automated image synthesis, transforming source code from Git repositories into deployable containers via buildpacks, Dockerfiles, or nixpacks. It implements a GitOps delivery model with automated pipelines that trigger builds on push events and provision ephemeral review environments for pull requests.

Beyond deployment, it provides integrated infrastructure management for provisioning databases and caches through a graphical interface. The system includes multi-tenant isolation using namespaces, role-based access control with OAuth2 authentication, and automated SSL certificate management. Additional capabilities cover resource scaling, application health monitoring, and the attachment of persistent storage volumes.

The platform can be installed on local Kubernetes clusters or provisioned on supported cloud providers using a dedicated CLI and web-based management console.

Features

Containerized Application Deployments - Deploys and manages containerized applications on Kubernetes clusters without requiring manual configuration files.
Kubernetes Application Deployments - Simplifies the deployment and management of containerized applications on Kubernetes without requiring manual configuration files.
Review Environments - Creates isolated application instances for pull requests to validate code changes before merging.
CI/CD Orchestration - Orchestrates the automated building and deployment of container images from Git repositories into Kubernetes.
Buildpack-Based Synthesis - Transforms source code into deployable container images using buildpacks, nixpacks, or Dockerfiles automatically.
Container CI/CD Pipelines - Automates the build and deployment process by listening for push events from external git providers.
Container Deployment - Fetches source code from Git and runs it as a container using a specified build image.
Automated Image Synthesis - Automates the transformation of source code into deployable container images using buildpacks, Dockerfiles, or nixpacks.
Image Generation - Creates container images from source code before pushing them to remote registries.
Custom Resource Definitions - Manages application lifecycles and infrastructure by mapping user intent to Kubernetes custom resource definitions.
Source Builds - Compiles source code into deployable packages using Dockerfiles, Nixpacks, or buildpacks.
Deployment Source Managers - Links external git providers via access tokens to automate deployments upon push or pull request events.
Backend-as-a-Service Platforms - Attaches pre-configured data stores or messaging services to an application via a configuration form.
Git-Based Deployment - Synchronizes application environments with Git repositories to treat version control as the single source of truth.
Git-Based Deployment Automations - Triggers automatic builds and deployments from Git providers like GitHub, GitLab, or Bitbucket.
GitOps Automation - Implements automated workflows that trigger application builds and deployments based on changes in Git repositories.
Infrastructure Add-ons - Installs third-party or built-in services to provide extended functionality or database storage.
Infrastructure as Code - Defines application pipelines and environment configurations as version-controlled custom resource objects.
Ingress Controllers - Routes external traffic to application pods via an ingress controller while keeping worker pods private.
Kubernetes Tenant Isolation - Isolates resources and controls user access for different teams using Kubernetes namespaces and role-based access control.
Self-Hosted PaaS Platforms - Provides a self-hosted platform for developers to provision databases, scale resources, and manage SSL certificates.
Identity Authentication - Secures platform login and user access via external identity providers like Google, GitHub, or Microsoft.
Namespace-Based Isolation - Separates user groups and organizational resources using Kubernetes namespaces to ensure secure multi-tenancy.
Role-Based Access Control - Implements role-based access control to manage user permissions and secure multi-user collaboration.
Inactivity-Based Pausing - Reduces infrastructure costs by automatically turning off containers during periods of inactivity.
Review Environments - Spins up and cleans up isolated application environments based on pull request status.
Database Provisioners - Provides a graphical interface for deploying and attaching managed database and cache add-ons to applications.
CLI Administration Tools - Creates clusters and manages deployments through scripts or manual commands using a CLI.
Operator-Based Extensions - Installs and configures functional add-ons using operators managed through a user interface.
Review Environments - Provisions ephemeral, isolated application instances for validating pull requests before they are merged.
Management Consoles - Performs administrative tasks and accesses pods through a browser-based interface.
Auto Scaling - Dynamically adjusts the number of application instances based on traffic to optimize resource costs.
Infrastructure Provisioning and Management - Provides a graphical interface and tools for provisioning and managing the lifecycle of cloud-based infrastructure resources.
Cloud Provisioning - Creates and manages Kubernetes clusters on supported cloud providers using provider credentials.
Vertical Application Scaling - Adjusts resource allocation for applications through both vertical and horizontal scaling based on demand.
Container Registry Management - Pushes built images to public or local registries using secure authentication.
Operator-Based Lifecycles - Automates the deployment and configuration of supporting services like databases using Kubernetes operators.
Deployment Managers - Provides a graphical interface to configure and execute application deployment pipelines and webhooks.
Infrastructure as Code - Defines and applies application pipelines as infrastructure as code using custom resource definitions.
Database Deployments - Deploys and manages pre-configured database instances like PostgreSQL and MongoDB within Kubernetes using operators.
Pre-built Image Deployments - Deploys images already stored in a registry by integrating with external build environments.
SSL Termination Proxies - Encrypts traffic between clients and hosted applications through automated SSL termination.
Template-Based Deployment - Launches pre-configured applications using a library of ready-to-use templates to accelerate setup.
Multi-Tenant Identity Management - Implements an administration layer with OAuth2 authentication and isolated namespaces to ensure secure multi-tenancy.
Identity Management - Secures access to the management interface and hosted applications via external OAuth2 identity providers.
Multi-Tenant Isolation - Ensures secure separation of workloads and resources for different user groups within the shared infrastructure.
SSL Certificate Automation - Automatically issues and renews SSL certificates to ensure secure HTTPS communication for hosted applications.
CLI System Management - Installs and manages the system and its underlying resources using a command line tool.
Platform as a Service - GitOps-based PaaS for Kubernetes environments.
Backend and Infrastructure - Kubernetes-based PaaS for application management.

fosrl/pangolin

21,255View on GitHub

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

meshery/meshery

9,966View on GitHub

Meshery is a service mesh management plane and cloud native infrastructure orchestrator. It provides a visual design-as-code environment for modeling microservices and infrastructure components through declarative blueprints, functioning as a centralized platform for designing, deploying, and managing service mesh infrastructure. The platform is distinguished by its ability to translate visual designs into active deployments and its use of gRPC-based adapters to integrate with diverse infrastructure providers. It features a multi-tenant architecture that manages shared workspaces and role-bas

jenkins-x/jx

4,691View on GitHub

jx is a GitOps delivery platform and Kubernetes CI/CD orchestrator designed to automate the building and deployment of applications. It functions as a cloud native pipeline manager that executes container-based build and deployment sequences using a catalog of reusable tasks. The project distinguishes itself through the automated orchestration of preview environments, which are created and destroyed based on pull request activity to enable validation before merging. It employs a GitOps-based state synchronization model to maintain the desired state of clusters by polling git repositories and

quarkusio/quarkus

15,479View on GitHub

Quarkus is a Kubernetes-native Java framework designed for building high-performance, memory-efficient applications. It utilizes ahead-of-time native compilation to transform Java code into standalone, optimized binaries that eliminate the need for a virtual machine, enabling rapid startup and reduced memory consumption. By performing code augmentation during the build phase, it shifts heavy processing tasks away from runtime, ensuring that applications are optimized for cloud-native environments. The framework distinguishes itself through a unified approach to reactive and imperative program

kubero-devkubero

Features