Awesome GitHub RepositoriesPrivate Registries

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Kubescape is a Kubernetes security posture management platform designed to scan clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance risks. It functions as a comprehensive security suite incorporating a compliance scanner, a container image vulnerability scanner, an admission controller for policy enforcement, and a runtime security monitor. The platform distinguishes itself through runtime-aware vulnerability filtering, which maps libraries loaded in memory to determine if vulnerabilities are actually reachable. It also integrates with AI assistants via a Mo

This project is a container image registry and server-side storage system designed to house container images, layers, and manifests. It functions as an OCI compliant registry server that adheres to the Open Container Initiative Distribution Specification to store and deliver content over HTTP. The system provides a self-hosted solution for managing private libraries of container images within professional-grade infrastructure. It is designed to enable the development of custom registries by extending a base toolkit with specialized libraries and business logic. The registry covers image dist

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

This project provides a comprehensive guide and set of scripts for deploying and configuring a production-ready Kubernetes cluster from scratch. It centers on establishing a functional environment by installing core management components, storage, and networking across multiple nodes. The implementation emphasizes high availability for the control plane, utilizing layer-4 load balancing and leader election for the API server, scheduler, and controller manager. It further ensures reliability through the deployment of a distributed key-value store for persistent runtime data. The project cover

Coroot is an observability platform and Kubernetes performance monitor that utilizes eBPF to automatically collect metrics, logs, and traces without requiring manual code instrumentation. It functions as an OpenTelemetry trace analyzer and an LLM observability gateway, exposing system health data to large language models through the Model Context Protocol. The platform differentiates itself by combining automated root cause analysis and AI-driven diagnostics to investigate performance regressions. It also includes a cloud cost monitoring tool that attributes infrastructure spending to specifi

Acest proiect oferă un plan arhitectural cuprinzător și un set de implementări pentru construirea unei platforme ca serviciu (PaaS) pe Kubernetes. Acesta servește drept resursă tehnică pentru implementarea mediilor de orchestrare a containerelor, gestionarea întregului ciclu de viață al dezvoltării software și integrarea unui toolchain DevOps complet. Implementarea pune accent pe livrarea automată de software prin integrarea pipeline-urilor de build și livrare, registre private de containere și sisteme de configurare distribuite. Permite decuplarea setărilor aplicației de imagini printr-un manager de configurare centralizat, permițând actualizări specifice mediului fără a reconstrui containerele. Platforma acoperă o gamă largă de capabilități cloud-native, inclusiv orchestrarea rețelelor de containere, gestionarea traficului la nivelul 4 și 7 și orchestrarea microserviciilor cu strategii de actualizare rolling. De asemenea, încorporează un stack complet de observabilitate pentru logare centralizată, tracing distribuit și vizualizarea metricilor de tip time-series. Proiectul este implementat în principal ca o colecție de scripturi shell și fișiere de configurare pentru a automatiza implementarea stratului de orchestrare și a serviciilor sale suport.

KubeOperator este o platformă cuprinzătoare de gestionare a clusterelor Kubernetes, orchestrator de infrastructură și manager multi-cluster. Acesta funcționează ca o distribuție enterprise Kubernetes concepută pentru a automatiza implementarea, scalarea și gestionarea ciclului de viață al clusterelor de producție pe diverse platforme cloud și mașini fizice. Platforma se distinge prin capabilități specializate pentru medii air-gapped, inclusiv un motor de instalare offline care generează arhive software și gestionează registre private pentru implementări securizate, fără internet. De asemenea, oferă un dashboard centralizat pentru operațiuni de flotă, permițând importul clusterelor externe și orchestrarea infrastructurii în diferite regiuni geografice și zone de disponibilitate. Sistemul acoperă o suprafață operațională largă, inclusiv provizionarea automată a mașinilor virtuale, urmărirea inventarului hardware și gestionarea declarativă a ciclului de viață pentru patching și scalare. Încorporează servicii integrate de backup și recuperare, control al accesului bazat pe roluri cu sincronizare LDAP și monitorizare cuprinzătoare pentru sănătatea și metricile de performanță ale clusterului. Sarcinile administrative și operațiunile de cluster sunt executate printr-o interfață bazată pe web.

Exegol is an offensive security platform and containerized tooling orchestrator designed to deploy and manage isolated security operations environments. It functions as a workspace manager that provisions pre-configured security images and toolkits within Docker containers to protect host systems from malicious payloads. The platform distinguishes itself by integrating AI security workflow orchestration, allowing AI assistants to discover and trigger security tools through a standardized communication protocol. It further provides remote desktop gateway capabilities, enabling GUI access via X

Watchtower is a Docker container update automator that monitors registries for new image pushes and automatically restarts containers with the latest versions. It functions as a container lifecycle manager, handling the process of bringing running containers up to date without manual intervention. The service includes specialized controls to manage deployment risk and precision, such as image age deferral and deployment cooldowns to protect against buggy releases. It supports image tag pinning to restrict updates to specific version series and can operate as a self-updating service to maintai

Argo CD Image Updater is a tool designed to automate the lifecycle of container images within Kubernetes environments. It monitors container registries for new software versions and automatically updates the corresponding image tags in version control repositories to ensure that running workloads remain current. The system distinguishes itself by maintaining a declarative state through GitOps synchronization, where updated image references are committed directly back to version control. It employs a controller-based reconciliation loop that periodically polls registries for metadata or reacts

Mayastor is a software-defined, cloud-native block storage solution designed to provide high-performance, persistent storage for stateful applications within container orchestration environments. It functions as a distributed storage control plane that decouples application data from physical hardware, enabling dynamic provisioning and management of block volumes across clustered nodes. The platform distinguishes itself by utilizing a user-space storage driver architecture that bypasses kernel overhead to maximize hardware performance. It leverages the NVMe-over-Fabrics protocol to deliver lo