Infrastructure (cloud, k8s)

My personal recommendation of tools and services for your infrastructure incl. cloud and kubernetes

Posted July 13, 2021 by Adrian Wyssmann

Kubernetes

Management

Url Source Description
Kubernetes Operations (kops) Source Kubernetes Operations (kops) - Production Grade K8s Installation, Upgrades, and Management
Kubeone Source Kubermatic KubeOne automate cluster operations on all your cloud, on-prem, edge, and IoT environments
keptn Source Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications
kubermatic Source Kubermatic Kubernetes Platform - the Central Kubernetes Management Platform For Any Infrastructure
Hyscale Source HyScale is an Application Centric Abstraction Framework over K8s.

Tools

Url Source Description
external-secrets Source The External Secrets Kubernetes operator reads information from a third party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets
sealed-secrets Source A Kubernetes controller and tool for one-way encrypted Secrets
Network-MultiTool Source Multi-arch multitool for container network troubleshooting.
octant Source Highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
skooner Source Simple Kubernetes real-time dashboard and management
acme-distributed Source Simple ACME client for distributed certificate ordering
chaos-mesh Source A Chaos Engineering Platform for Kubernetes
kadalu Source A lightweight Persistent storage solution for Kubernetes / OpenShift using GlusterFS in background

Local Clusters

Url Source Description
kind Source Kubernetes IN Docker - local clusters for testing Kubernetes
minikube Source Run Kubernetes locally

Cloud Security

Url Source Description
curifense Source Curiefense is a unified, open source platform protecting cloud native applications
crowdsec Source An open-source massively multiplayer firewall able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global IP reputation database to protect the user network
terrascanSource Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure
checkov Source Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew
Clair Source Vulnerability Static Analysis for Containers

Network

Url Source Description
Nebula Source A scalable overlay networking tool with a focus on performance, simplicity and security

Edit this page