Building sustainable ecosystems for cloud native
Contributor: Abhay1906
kgateway routes AI inference traffic to self-hosted model servers. It picks the best server using EPP scoring — based on KV cache usage, queue depth,...
Contributor: Jaisheesh
Currently, while kpt is a highly capable tool for declarative Kubernetes management, its official examples rely heavily on complex, specialized...
Contributor: Jeffrey Zhang
Agentic AI is commonly used to predict and resolve problems before they occur, requiring access to data in near real-time. However, traditional...
Contributor: matteofari
This project adds signing and verification for OSCAL JSON artifacts in compliance-trestle so generated documents can be verified in CI/CD and...
Contributor: Yanxi Teng
The current OpenKruise Rollout implementation for Deployment progressive delivery mutates the updateStrategy to Recreate, creating a dangerous risk...
Contributor: Aabid Ali
Abstract: This proposal outlines a plan to enhance Meshery's relationship evaluation capabilities by implementing client-side policy evaluation using...
Contributor: Asmit Kumar Rai
Problem: KubeStellar (KS) lacks an automated system to measure and visualize data-plane performance (e.g., sync latencies) under AI workloads, making...
Contributor: Esosa Ohangbon
Kubewarden is a universal policy engine for Kubernetes enabling policy-as-code. It allows users to define and enforce policies for their Kubernetes...
Contributor: grorge
This project aims to enhance the security of WasmEdge plug-ins by exporting key WASI APIs, thereby ensuring a robust and secure virtual filesystem...
Contributor: Kapil Sareen
This project aims to integrate AI agents with Knative Functions by developing a MCP server that allows to dynamically create and deploy functions...
Contributor: Minh Nguyen Dang
Jaeger’s Service Performance Management (SPM) currently requires a complex setup with a separate processor and Prometheus storage to compute RED...
Contributor: Peter Chang
etcd is a distributed key-value store that serves as the backbone for Kubernetes and other cloud-native systems, storing critical configuration and...
Contributor: Shichao
This project aims to enable AI training in a multi-cluster environment while ensuring data privacy through federated learning. In a multi-cluster...
Contributor: sreehariX
The current Vitess RAG chatbot which uses documentation, Slack discussions, and GitHub issues data, has low accuracy. This project aims to improve...
Contributor: unsuman_
Lima(LInux MAchines) is a tool that helps to run Linux Virtual Machines on macOS and other hosts, with a focus on running containers on them with...
Contributor: Vitor Floriano
This project aims to create a GitHub Action similar to Dependabot for Kubebuilder, automating the process of regenerating scaffolds and preserving...
Contributor: Devaansh Kumar
Ingress2gateway is a tool to help users migrate and convert Ingress, and implementation-specific configurations to Gateway API. As we add more...
Contributor: tonyli233
We propose transitioning from the deprecated gogo/protobuf to Vitess's vtproto as part of an effort to modernize Prometheus's codebase. The migration...
Contributor: Krish Aryan
This project aims to create a user-friendly way to manage essential KubeArmor security functions from within the Rancher Manager interface. This will...
Contributor: Zoey_Hong
In a single Knative Functions command, we aim to abstract the entire process of building serverless functions using WebAssembly (WASM)—from compiling...
Contributor: Zhe Shen
Enhance Open Cluster Management (OCM) to efficiently schedule AI workloads across multiple Kubernetes clusters by optimizing the use of GPU/TPU...
Contributor: Siddharth Tewari
This project aims to implement wasm-coredump, to enhance the debugging capabilities of WebAssembly by implementing a coredump feature for post-mortem...
Contributor: Shubh Gaur
The project aims to develop an automated benchmarking system for KubeArmor to enhance the efficiency and repeatability of performance evaluations. By...
Contributor: ShlokMishra
The Objective of this project is to develop IDE plugins that can enhance the developer experience while working with Service Mesh Performance...
Contributor: Harshita Sao
The Cloud Native Computing Foundation (CNCF) hosts a diverse ecosystem of cloud-native projects. Ensuring the security of these projects is paramount...
Contributor: GLVS Kiriti
This project aims to upgrading the event-generator to improve its testing and bench-marking capabilities, its reliability, and its consistency, and...
Contributor: Manik Rana
This project aims to advance the support for _created lines, or Created Timestamps, in Prometheus. Building on the groundwork laid during GSoC 2023...
Contributor: Arthur Sens
The proposal consists in treating the time series creation time as another metadata. We propose a few incremental improvements that can be released...
Contributor: Bokai Jia
CurveBS currently use etcd as metadata storage but etcd has limited scalability, and the amount of metadata that can be stored is limited.So i plan...
Contributor: Darshan Kumar
Build out samples and workflows showing how to use Dockerfiles in harmony with a cloud native buildpacks platform. Need to update the pack...
Contributor: Debasish Biswas
Overview: In the current scenario, the Knative Eventing Kafka Broker's data-plane communication with Apache Kafka for consuming and producing records...
Contributor: Eileen Yu
The introduction of external plugin extends the functionality of the Kubebuilder CLI tool by allowing users to create and use custom plugins. These...
Contributor: Ha Anh Vu
This project aims at leveraging the current community jaeger-clickhouse storage plugin and making ClickHouse one of the core storage backend for...
Contributor: Haiyu Zuo
Our goal is to create a Github Action from KubeArmor, which will be used by other Github projects. This Github Action, using KubeArmor, will be used...
Contributor: mgjm
Running containers with podman using conmon-rs as the container monitor. This requires additional features to be implemented in conmon-rs and an...
Contributor: none_24
Streamlining the OFEP process for enhancing community engagement through automation scripts by doing almost everything they can, from creating...
Contributor: Rakshit Gondwal
Currently, the Metrics Controller in the Keptn Lifecycle Toolkit only allows querying a single value per metric. This project will enable users to...
Contributor: Rohith Raju
This project aims to improve Falco's capabilities by adding WebAssembly as a new officially-supported compilation target. The objective is to create...
Contributor: Shivang Shandilya
The proposal deals with the problem of the creation of a kubectl plugin for Armada, the creation of the desired plugin will allow users to...
Contributor: Shubham Nazare
The TUF specification provides explicit guidelines for how artifacts should be hashed and later verified to guarantee their integrity. However,...
Contributor: Swastik Gour
One possible way to use the Kubernetes API to connect to the KubeVela Control Plane in the background and fetch the required information like...
Contributor: Pradyumna Krishna
in-toto framework generates metadata files that are represented as signature wrapper or envelope. in-toto current signature wrapper requires...
Contributor: ZiJian Ren
TiSpark maintains a com.pingcap.tikv/tikv-client module. It is a fork of the current official tikv-client legacy version. The difference from the...
Contributor: Abhinandan Udupa
WebAssembly has become extremely popular among the developer community lately. It offers near native performance in a browser and is meant to not be...
Contributor: shouxunsun
The chaos-daemon component of Chaos Mesh manages many subprocesses to inject faults into other containers(Linux namespaces), and we need to...
Contributor: Nitish Gupta
Introduce a new variadic flag to the Pack CLI that enables configuring different cache types geared towards app developers or operators that are...
Contributor: Tianyi(Tony)
This project aims to provide unified Grafana dashboards to visualize K8s controller/operator status based on Kubebuilder. In general, users have to...
Contributor: Lenery Chen
Rebuilderd is a verification system for binary packages. It repeates the build process of a package in an identical environment and verifies that the...
Contributor: Nikhil Sharma
This proposal defines a new plugin that allows users to get the scaffold with the required code to have a project that will deploy and manage an...
Contributor: Basit Hasan
Chaos Mesh supports injecting errors into the physical machine through PhysicalMachineChaos. However, deploying it outside the Kubernetes cluster is...
Contributor: Zhe Cheng
Design and create Terraform modules framework that is benefit to extension and reusability to easily install and configure cert-manager, associated...
Contributor: Nathaniel Jason
Running Kubernetes should be done with the utmost security in mind. KubeArmor provides a policy based system to increase the quality of security in a...
Contributor: Aaditya Narayan Subedy
The Service Mesh Performance standard captures and characterizes infrastructure capacity, service mesh configuration, and workload metadata. When we...
Contributor: Marius Kimmina
When using CoreDNS to serve DNS traffic over TLS/HTTPS certificates have to be managed (created and renewed) manually. The goal of my project is to...
Contributor: Abhisman Sarkar
Implementing version management for TUF’s python reference implementation. The implementation does not currently have a way to migrate TUF...
Contributor: Lakshya Gupta
In-toto is a framework designed to protect software supply chain integrity. It provides security against attackers who can get control of a step in...
Contributor: Yash Kamboj
Create a centralized catalog of Patterns, WebAssembly filters and eBPF programs which let's the user import, edit and deploy patterns.The Service...
Contributor: Bingchang Chen
Lightning is a tool used to import large amounts of data into TiDB. In addition to the logic of preparation and improving performance, the main logic...
Contributor: Fatih ATES
Cloud Native Buildpacks' primary function is to turn source code into a runnable image and because of that it's natural for it to be used within...
Contributor: Zhuoran He
The goal of this project is to offer a formal verification using TLA+ for TiKV’s new “Async Commit” transaction model, which brings us more...
Contributor: Tim Ramlot
cert-manager can be installed using Helm or with regular Kubernetes manifests, but when using regular manifests it is difficult to customize the...
Contributor: Piyush Singariya
Currently, SMI doesn’t provide connectivity over multiple Kubernetes clusters. It is becoming common for users of a service mesh to have more than...
Contributor: Hemanth Krishna
The Authentication server of the litmus portal (which resides in the litmus-portal folder of the main litmus repository) is written in golang, uses...
Contributor: Arsh Sharma
cert-manager is a Kubernetes add-on used extensively to automate the management and issuance of certificates from various issuers. This project aims...
Contributor: Mritunjay Sharma
Buildpacks are pluggable tools that can be used to transform the source code to OCI compliant images (Docker images) that can run on any cloud. It is...
Contributor: Kensei Nakada
In real Kubernetes, we cannot know the results of scheduling in detail without reading the logs, which usually requires privileged access to the...
Contributor: Halil İbrahim Ceylan
Buildpacks are a kind of framework for preparing a container environment for your apps. Lifecycle is a particular workload that needs to run one by...
Contributor: Dhruv P
Users configuring their Envoy-based data planes don't know how to find the optimal Envoy configuration given their workload's resiliency and...
Contributor: Yeshuai Cui
Open Application Model [OAM] is a runtime-agnostic specification for defining cloud native applications and enabling building app-centric platforms...
Contributor: Qijia “Joy” Liu
Description: rebuilderd is a verification system for binary packages. It repeats the build process of a package in an identical environment and...
Contributor: Z0marlin
The Node Disk Manager (NDM) daemonset runs on every node in the Kubernetes cluster, discovers and monitors various storage devices connected to the...
Contributor: Naman Lakhwani
Thanos Querier component supports basic TLS configuration for internal gRPC communication. This works great for basic use cases but it still requires...
Contributor: Saswata Mukherjee
This project aims to build and implement mdox, a documentation automation CLI tool, which can keep project documentation completely up-to-date by...
Contributor: Furqan Munir
A cloud computing is a set of huge networks and computing nodes, where enormous amount of data flow takes place. An efficient performance is needed...
Contributor: Hyungsuk Kang
Versioned key-value data management interface for TiKV
Contributor: Chanakya Ekbote
This project aims to try and detect anomalies that occur in a CoreDNS server using a machine learning model developed in Keras. This project would...
Contributor: Devdutt Shenoi
To create a Cloud Native TiKV implementation which utilises a Cloud Platform's remote provisions to augment the current local only storage back-end...
Contributor: Raj Babu Das
This project aims is to work on the following issues: Develop local cluster provider (KIND) Deployment of Prombench on EKS and local cluster Resolve...
Contributor: JayBatra
Prometheus is one of the standard-bearing open-source solutions for monitoring and observability. As a Prometheus-as-a-Service platform, Cortex fills...
Contributor: Christian Rebischke
in-toto is a project for protecting supply chain integrity. The project is a sister project of the TUF project and both are there for tightening the...
Contributor: Ahmad Nurus Shobah
This project aims to implement controller-runtime for Rook nfs-operator and addresses several issues along with it. Currently, Rook nfs-operator only...
Contributor: Harshitha Chowdary Thota
Thanos is allowing storing metrics for long, if not unlimited time. Currently however there is no fine-granular process of retaining only some...
Contributor: Anuj Sharma
The Kubernetes Multi-Tenancy Working Group is chartered with exploring and defining multi-tenancy models for Kubernetes. The Multi Tenancy Benchmarks...
Contributor: Somtochi Onyekwere
Cluster Addons are resources that are considered inherently part of the Kubernetes cluster as they help extend the functionality of the cluster. Over...
Contributor: Drumil Patel
Prombench is the automated E2E testing and benchmarking for Prometheus. Prombench uses Kubernetes to benchmark Prometheus using various scalable...
Contributor: Kush Trivedi
Many performance benchmarks are limited to single instance load generation (single pod load generator). This limits the amount of traffic that can be...
Contributor: Naveen Jain
Currently, there exists no software solution for checking whether a service mesh implements Service Mesh Interface or not. This causes the following...
Contributor: Harkishen Singh
Prometheus is a monitoring tool that monitors the specified targets, scrapes the system and application metrics at regular intervals, evaluates rules...
Contributor: Prem Saraswat
So far Thanos has successfully used pieces of old Prometheus UI with some improvements. However, since Prometheus now moved all UI pages to React, it...
Contributor: Wangqian Qian
Resource Provision: Use CRD Operator to invoke the cloud resource and create the resource object. Resource Binding: Use Service binding to do the...
Contributor: Alejandro Germain
rkt implements the App Container Executor specification of the appc Container Specification and uses systemd unit properties to implement its...
Contributor: Junjun LI
We would like to propose a improvement on current Kubernetes topology manager to become aware of generic hardware device topology at node level, so...
Contributor: Mattia Lavacca
The outcome of this project has been the development of a tracing framework that allows to measure and monitor some Falco internal metrics (counter...
Contributor: Zhiqi WANG
A common use case for regex matchers is to use them to query all series matching a set of label values, e.g. up{instance=~"foo|bar|baz"}. Grafana's...
Contributor: Róbert Vašek
OpenStack Manila manages shared file-systems across the cloud. Being able to create and access them with ease from the container world is showing to...
Contributor: Urvil Patel
This project involves designing the layout of IPTable rules using OPA's policy language Rego, implementing the algorithms that generate IPTables from...
Contributor: Shahriyar Mammadov
Benchmarks continuously strive to improve performance standards in order to stay relevant in the market and playing important role for having better...
Contributor: Hrishikesh Barman
Prombench the benchmarking tool for Prometheus will be extended to support even more tests, newer components, metrics which will help both developers...
Contributor: Yuanli Wang
Using machine learning method to tune database configurations automatically
Contributor: An Xiao
When CoreDNS serves DNS queries publicly or inside Kubernetes clusters, the source IP of the incoming DNS query is an important identity. For...
Contributor: Ajat Prabha
This project aims to introduce a plugin mechanism to the Kubernetes Dashboard. It shall deal with defining the plugin framework architecture, it’s...
Contributor: Jianbo Ma
GPUSharing is an open source project which could share GPU by leveraging Kubernetes scheduling and Device Plugin extensibility.I would like to...
Contributor: Elijah Oyekunle
The Kubernetes dashboard previously supported Third Party Resources (TPR), but these were replaced in Kubernetes by Custom Resource Definitions...
Contributor: Giovan Isa Musthofa
This project aims to create new API to enable multiple network interface for Rook storage providers. Currently, Rook providers only choice is to use...
Contributor: Vladimir Masarik
It is better to discover performance problems sooner than later, but this is even more important if we are talking about a database. The newly...
Contributor: Jian Liu
The project aims at creating a containerd-kata runtime plugin for containerd to integrate it with katacontainers. The integration enables containerd...
Contributor: Harsh_Agarwal
My project aims to benchmark Prometheus & test Prometheus’s Kubernetes & Consul Service Discovery in an automated & real-time environment. This will...
Contributor: Rohan Gupta
Rook is an open source orchestrator for distributed storage systems running in kubernetes, currently in alpha state and has focused initially on...
Contributor: Anirudh M
Envoy is getting fuzz testing support. The coverage is limited. This project focuses on extending the fuzz coverage including proto, data plane, H2...
Contributor: Ganesh Vernekar
Alerting is an important feature in monitoring when it comes to maintaining site reliability, and Prometheus is being used widely for this. Hence it...
Contributor: Jiacheng Xu
In distributed TensorFlow, identifying the nodes without domain name collision is a big challenge. CoreDNS supports DNS Name Server Identifier (NSID)...
Contributor: Marko Mudrinić
Kubernetes offers two ways to extend the core API, by using the CustomResourceDefinitons or by setting up an aggregated API server. This ensures...
Contributor: Nikhita Raghunath
ThirdPartyResources are already available but the implementation has languished with multiple outstanding capabilities that are missing. They did not...
Contributor: MINGQIANG LIANG
go-restful（https://github.com/emicklei/go-restful）is a widely-used library for building REST-style Web Services using Google Go. With powerful...
Contributor: Amit Kumar Jaiswal
This project aims to build and implement a Data model for logs in a large kubernetes cluster to process, correlate and query to make the...
Contributor: Antoine D.
The project The goal is to capture the DNS data within a CoreDNS middleware and write it to a "dnstap log file" (prehaps over the network) Steps I...
Contributor: Konrad Djimeli
The Kubernetes python client is a Kubernetes incubator project. The python client makes it possible to access Kubernetes with python. Jupyter...
Contributor: Hao Zhang
The main idea of this proposal is Why and How we integrate unikernel as a runtime into kubernetes/frakti project, so that kubernetes could use...
