(2)
DEPRECATED; Notary server and signer cooperatively handle signing and distribution
2y
5M+
72
CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.
6h
50K+
A container management platform built for organizations that deploy containers in production.
16m
100M+
442
Handshake service for kernel TLS consumers
12h
50K+
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
12h
50K+
Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code
12h
50K+
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
12h
50K+
OPA REST server that enforces Rego migration policies for the Forklift VM migration operator.
6h
50K+
Pinniped CLI is a command-line utility for interacting with Pinniped
12h
50K+
Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh
12h
50K+
Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.
12h
10K+
Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.
1m
100M+
32
Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.
6h
10K+
Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.
12d
1M+
66
Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.
6h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.
6h
10K+
The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.
12h
10K+
Clustered in-memory database engine compatible with open source Redis by Redis Labs
8h
100M+
47
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.
12h
10K+
Portainer BE - a fully featured service delivery platform for containerized applications
8d
100M+
147
Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.
6h
10K+
Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.
6h
10K+
First-class integrations between Vault and Kubernetes.
2m
50M+
20