Awesome GitHub RepositoriesAPI-Driven Infrastructure Managers

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Rancher Desktop is a cross-platform desktop application for Windows and macOS that provides a graphical interface for managing local containers and Kubernetes clusters. It serves as a local development environment for running and coordinating containerized workloads on a personal workstation. The project features a pluggable container engine, allowing users to switch between different runtimes such as containerd or Docker within a single interface. It automates the provisioning of local Kubernetes distributions to facilitate the development and testing of orchestration environments. The appl

Anonaddy is an email forwarding gateway and alias manager designed to protect user identity. It functions as a mail server that routes messages from custom domains and aliases to verified destination addresses using programmable routing rules. The system provides an SMTP privacy proxy to mask the sender's real email address for outgoing messages and includes a PGP encryption tool to secure the body and headers of emails before they are forwarded. It supports custom domain email routing through DNS and MX record verification, allowing users to manage multiple identities to prevent ownership li