Best Cncf

Helm is a tool designed to manage Kubernetes deployments. It uses pre-packaged collections called “charts” to bundle application configurations – including dependencies – into easily deployable units. This simplifies the process of deploying and updating applications within a Kubernetes cluster, pri...

Containerd is an open-source container runtime designed to manage container lifecycles efficiently. It provides a foundational layer for running containers based on the Open Container Initiative (OCI) standards. Primarily used by developers and system administrators involved in building, deploying,...

Argo CD is a containerization tool designed to manage deployments across Kubernetes clusters. It utilizes GitOps principles, automating application updates by synchronizing cluster configurations with changes tracked in Git repositories. This approach benefits development teams and operations profes...

Jaeger is an open source, distributed tracing system designed for observability. It captures timing information across microservices allowing developers and operations teams to pinpoint performance problems in intricate applications. Primarily used by those building and managing complex, cloud-nativ...

Falco is an open-source runtime security project designed to protect containerized applications. It monitors system calls within containers and their host environment, identifying deviations from expected behavior. This detection capability makes it useful for DevOps teams, security engineers, and a...

Harbor is an open source container registry built for organizations seeking robust container image management. It offers secure storage and distribution of container images, leveraging Kubernetes for orchestration. Harbor provides features like vulnerability scanning and access control, making it su...

Linkerd is a lightweight, open-source service mesh designed for Kubernetes environments. It enhances application reliability through features like mutual TLS authentication and circuit breaking. This simplifies operational management for developers and operations teams seeking improved security, obs...

Kyverno is a CNCF project providing a Kubernetes admission controller for enforcing policies. It utilizes declarative configuration to manage container security and governance within clusters. This tool is valuable for teams deploying applications on Kubernetes seeking automated policy validation an...

Cloud Native Buildpacks provide a streamlined approach to building container images. They transform application source code into standardized containers without requiring extensive Dockerfile configuration. This system simplifies development workflows and ensures consistent deployments across variou...

KEDA provides serverless scaling for containerized applications running on Kubernetes. It allows deployments to automatically adjust their resource usage—and therefore scale up or down—based on events from sources such as Kafka, RabbitMQ, and cloud event streams. This makes it suitable for developer...

Longhorn is an open source Kubernetes storage platform providing block storage solutions. It enables automated replication of VM data across multiple locations offering disaster recovery capabilities. This system is particularly useful for organizations utilizing Kubernetes and requiring reliable, s...

The Notary Project is an open-source initiative focused on enhancing software supply chain security through containerization. It utilizes cryptographic signatures to verify the integrity of container images, providing a traceable record of their origin and modifications. This system is particularly...

Crossplane extends Kubernetes APIs to manage and provision infrastructure resources—servers, databases, storage—across various cloud providers and on-premise environments as if they were native Kubernetes objects.

Kata Containers is an open-source project that provides a secure container runtime utilizing lightweight virtual machines. It integrates with container orchestration platforms like Kubernetes while using hardware virtualization to isolate workloads at the kernel level. This architecture combines the...

WasmEdge is a lightweight, open-source runtime environment that allows WebAssembly modules to be executed as containers, providing a secure and efficient way to run decentralized applications and microservices.

KubeEdge is an open-source, Cloud Native Computing Foundation (CNCF) project that extends native Kubernetes container orchestration capabilities to edge computing environments. It provides lightweight components, such as the CloudCore and EdgeCore modules, to manage applications and devices on edge...

Zot is an open-source, vendor-neutral container image registry built to store and distribute OCI-compatible artifacts. Written in Go, it is distributed as a single binary without external dependencies, making it straightforward to deploy in bare-metal, cloud, or edge environments. The project is par...

Runwasi is an open-source containerization platform designed to simplify application deployment and management within Kubernetes clusters, particularly focusing on improved developer workflows and reduced operational overhead.

OpenYurt is an open-source project extending Kubernetes to enable hybrid cloud deployments by allowing pods to run on diverse infrastructure, including traditional servers and other Kubernetes clusters, alongside standard containers.

Notation is a containerization technology from Amazon Web Services that aims to improve the density and efficiency of container deployments by optimizing resource utilization at the OS level.