Kubeapps

Kubeapps is a web-based application management interface for discovering, deploying, and supervising the operational lifecycle of software across one or more Kubernetes clusters. It provides a visual dashboard for orchestrating the installation and management of applications and operators, replacing manual command line operations.

The project distinguishes itself through multicluster coordination, allowing users to manage applications across several distinct cluster environments from a single interface. It utilizes a software discovery system that catalogs packages from OCI-compliant container registries and chart repositories, using schema-driven form generation to simplify parameter configuration during deployment.

The platform covers a broad range of capabilities including real-time lifecycle tracking, version comparisons for upgrades, and the removal of deployed resources. Access is secured through an identity layer that integrates OpenID Connect providers with role-based access control to enforce granular permissions for deploying and modifying software.

Historical management events are maintained through application event auditing to record administrative changes.

Features

Kubernetes Application Deployments - Orchestrates the full installation and lifecycle of software packages within Kubernetes clusters via a web interface.
Access Control and RBAC - Implements a permission system to restrict management actions based on role-based access control rules.
Repository Catalog Browsers - Provides a visual interface for searching and filtering available software packages across configured repositories.
Identity Provider Role Mappings - Restricts user actions by mapping identity provider roles to specific permissions within the management interface.
OCI Cataloging - Discovers and catalogs deployable software using standard OCI-compliant container registries.
OCI Application Catalogs - Implements a software discovery system that catalogs application packages from OCI-compliant container registries.
Catalog-Based Installations - Facilitates installing software packages from repositories via a web interface to specify release names and values.
Multi-Cluster Coordination - Coordinates the deployment and management of applications across several different Kubernetes clusters.
Web-Based Kubernetes Management Interfaces - Provides a web-based interface that abstracts Kubernetes complexity for application discovery and deployment.
Deployment Configuration - Provides a user interface to customize deployment settings and parameters before installing software.
Application Update Managers - Allows users to update and upgrade deployed applications directly through a browser interface.
Operator Deployments - Supports deploying software using both Helm charts and Kubernetes operators through a form-based interface.
Multi-Cluster Orchestrators - Provides a centralized control plane to manage the operational administration of multiple distributed Kubernetes clusters.
Multicluster Deployments - Enables the deployment and management of applications across multiple clusters from a single dashboard.
Multicluster Application Management - Coordinates the deployment, upgrading, and removal of applications across multiple Kubernetes clusters from a single dashboard.
Kubernetes Operators - Enables the installation of operators to automate the management of complex applications within a cluster.
Multicluster Application Orchestrators - Provides a management dashboard to coordinate application installation and lifecycles across multiple Kubernetes environments.
OCI Application Container Launches - Pulls and deploys application packages directly from compliant OCI container registries.
Runtime Authorization Enforcements - Restricts user actions in real time based on defined permissions to ensure secure authorization.
Role-Based Access Control - Controls user permissions for deploying and managing applications based on defined role-based access rules.
SSO-Integrated Access Controls - Enforces user permissions through RBAC while delegating authentication to OIDC identity providers.
Application Lifecycle Management - Provides a web interface to track, upgrade, and delete running applications within a cluster.
Application Lifecycle Management - Tracks deployment progress, monitors installation status across namespaces, and manages software removal.
Repository Configuration - Includes tools to configure software catalogs, supporting both private and default repositories.
OCI Container Registry Clients - Utilizes a client to retrieve application packages and catalogs from OCI-compliant container registries.
Multi-Format Packaging Support - Supports various industry packaging standards to maintain compatibility across different deployment tools.
Version Upgrades - Compares version values to identify available upgrades and modify deployment parameters.
Visual Deployment Interfaces - Enables software installation into a cluster using visual tools and editors to define parameters.
Authenticated Request Proxies - Implements a proxy that attaches stored credentials to requests for Kubernetes API server authentication.
API and Frontend Authentication - Protects the frontend and API by authenticating users via a standalone identity provider.
External Identity Provider Integration - Restricts access to the management interface by authenticating users through a standalone identity provider.
Kubernetes Identity Integration - Integrates cluster identity with external OIDC providers to control application deployment permissions.
OIDC Proxy Security - Uses an OIDC proxy to secure access to Kubernetes API servers via identity token impersonation.
OIDC Identity Integrations - Provides integration with OpenID Connect providers to handle user login and identity redirection.
Proxy Token Issuance - Exchanges identity tokens for client certificates to authenticate requests to Kubernetes API servers via impersonation proxies.
Repository Access Controls - Manages global or namespace-specific repositories using specialized read and write permissions.
Application Uninstallers - Removes applications and their associated Kubernetes resources via a single operation.
Real-Time Monitoring Systems - Tracks installation progress in real time to verify resource readiness and provide access to credentials.
Readiness Tracking - Monitors installation progress by tracking the operational readiness of cluster resources.
Schema-Driven Settings Forms - Auto-generates user interface forms from schema definitions to simplify the management of application settings.

quarkusio/quarkus

15,479View on GitHub

Quarkus is a Kubernetes-native Java framework designed for building high-performance, memory-efficient applications. It utilizes ahead-of-time native compilation to transform Java code into standalone, optimized binaries that eliminate the need for a virtual machine, enabling rapid startup and reduced memory consumption. By performing code augmentation during the build phase, it shifts heavy processing tasks away from runtime, ensuring that applications are optimized for cloud-native environments. The framework distinguishes itself through a unified approach to reactive and imperative program

feast-dev/feast

6,727View on GitHub

Feast is an open-source feature store for machine learning that provides a central platform for defining, storing, and serving features across both training and inference workflows. It operates as a declarative system where feature definitions are written as code in Python files, synchronized to a central registry, and made available for low-latency online retrieval or point-in-time correct historical joins for training datasets. The project abstracts storage behind a pluggable architecture, allowing offline and online backends to be swapped without changing retrieval logic, and coordinates ma

lensapp/lens

23,180View on GitHub

Lens is a multi-cluster management platform and desktop application for administering Kubernetes environments. It provides a graphical interface for deploying Helm charts, editing YAML manifests, and managing the lifecycle of pods and deployments. The project features an AI-powered cluster assistant that enables users to query cluster state, perform autonomous troubleshooting, and translate natural language requests into system commands. It also supports collaborative team access through shared spaces, utilizing encrypted cluster sharing and role-based access control to manage credentials and

fluxcd/flux2

7,888View on GitHub

Flux is a Kubernetes GitOps delivery tool used to automate application deployments by synchronizing cluster state with configurations stored in Git, OCI, or Helm repositories. It functions as a set of controllers that monitor desired state in external sources and continuously reconcile the live cluster to match those definitions. The system distinguishes itself through a multi-cluster management plane that coordinates application delivery across fleets of remote clusters from a central hub. It provides a dedicated mechanism for automated image updates, which scans container registries for new

vmware-tanzukubeappsArchived

Features