Awesome GitHub RepositoriesInfrastructure Reconciliation Controllers

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

Argo Workflows is a container-native workflow engine that functions as a Kubernetes custom resource controller. It orchestrates complex sequences of containerized tasks by executing them as directed acyclic graphs, allowing for dependency management and parallel processing within a cluster. The system extends the native Kubernetes control plane to manage the full lifecycle of automated processes, from initial triggering to final resource cleanup. The platform distinguishes itself through its controller-pattern reconciliation, which continuously monitors workflow states to align them with desi

Crossplane is a Kubernetes-based control plane framework that functions as a cloud resource orchestrator and infrastructure-as-code platform. It enables the management of heterogeneous infrastructure by extending the Kubernetes API to provision and maintain external cloud services through declarative configuration. By utilizing custom resource controllers, it continuously reconciles the state of external infrastructure with defined desired states, ensuring consistent deployment and lifecycle management across multiple cloud providers. The platform distinguishes itself through its composition-

Pipeline 是一个 Kubernetes 原生的 CI/CD 框架和云原生流水线编排器。它作为一个自定义资源控制器，将声明式的流水线定义转换为协调的 Pod 执行和托管工作负载。 该系统充当容器化任务运行器，允许执行独立的构建步骤和可重用任务，这些任务处理特定输入以产生定义的输出。它通过在云环境中将一系列独立容器作为模块化组件运行，实现了复杂工作流的编排。 该平台涵盖了自动化软件交付和容器化任务编排，通过资源隔离支持多租户构建基础设施。它提供了监控执行日志和进度的功能，以及可以在不同命名空间和项目之间共享的可重用流水线组件的创建。

Kubebuilder is a framework and set of scaffolding tools used to build Kubernetes APIs and controllers. It functions as an operator framework that provides generators for custom resource definitions, admission webhooks, and RBAC manifests to extend cluster functionality. The project distinguishes itself through marker-based code generation, which parses source code comments to automatically produce Kubernetes manifests and boilerplate logic. It employs a hub-and-spoke versioning model to translate data between multiple API versions and uses a three-way merge strategy to automate project migrat

The Operator SDK is a framework for building, packaging, and managing custom controllers that extend the Kubernetes API. It serves as a toolset for defining new API types and implementing reconcile loops to automate the lifecycles of complex applications. The project provides specialized support for creating operators based on Helm charts or Ansible playbooks, allowing users to maintain a desired cluster state using existing automation tools. It includes a dedicated system for packaging controllers into standardized container image bundles for distribution via the Operator Lifecycle Manager.

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

This repository is a curated collection of tutorials and source code examples for learning Spring Boot development, covering a range of practical project types. It provides hands-on materials for building complete applications, including a bulletin board forum system, a full-stack blog, and a large-scale e-commerce system, as well as projects that demonstrate a decoupled frontend and backend architecture. The collection focuses on guiding developers through real-world application construction, with step-by-step tutorials and source code studies for each project. It covers fundamental Spring B

Quip Node Manager is a graphical user interface designed for deploying, monitoring, and configuring Quip Network nodes and their associated container stacks. It serves as a container orchestration dashboard that allows users to manage interconnected application services without using command-line tools. The project features a hardware acceleration manager for mapping specific CPU and GPU compute resources to the runtime environment and managing device memory. It includes a system readiness validator to verify container tool availability and network port reachability before initiating the appl

This project is a containerized dynamic DNS update client designed to automate the synchronization of domain records with changing public IP addresses. It functions as a multi-provider synchronization engine that monitors network connectivity and updates DNS records across various cloud platforms and custom services to ensure consistent domain resolution. The system distinguishes itself through a provider-based adapter pattern that abstracts diverse third-party APIs into a unified interface, allowing for consistent record management. It employs multi-source IP discovery to mitigate rate limit

This project is a Kubernetes ingress controller that manages external traffic routing by integrating directly with Google Cloud load balancing infrastructure. It functions as a controller that continuously reconciles the desired state of cluster ingress definitions with the actual configuration of cloud-native load balancers. The controller automates the provisioning of static or ephemeral IP addresses and configures load balancers to distribute network requests across multiple availability zones. It employs declarative mapping to translate abstract service definitions into concrete cloud inf