Filter by
(2)
Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.
40m
50K+
Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.
1h
50K+
CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.
1h
50K+
Kyverno reports server provides a scalable solution for storing policy reports and cluster policy reports.
41m
50K+
Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code
44m
50K+
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
44m
50K+
OPA REST server that enforces Rego migration policies for the Forklift VM migration operator.
1h
50K+
Apache APISIX is a dynamic, real-time, high-performance API Gateway.
42m
50K+
Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh
1h
50K+
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
44m
50K+
Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.
1h
50K+
Pinniped CLI is a command-line utility for interacting with Pinniped
7h
50K+
Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.
1h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.
44m
10K+
Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.
43m
10K+
Harbor - An open source trusted cloud native registry that stores, signs, and scans content
42m
10K+
The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.
1h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.
42m
10K+
Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.
44m
10K+
Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.
7h
10K+
The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.
44m
10K+
Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.
7h
10K+
Kubernetes Pod Security Standards implemented as Kyverno policies.
41m
10K+
LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.
1h
10K+
trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.
40m
10K+
eBPF-based Networking, Security, and Observability for Kubernetes
42m
10K+
stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.
44m
10K+
Teleport is an identity-aware access platform that provides SSO, short-lived certificates, MFA and session recording for SSH, Kubernetes, databases, web apps and Windows desktops.
43m
10K+
4
Cloudflare Tunnel client that connects origin services to the Cloudflare network without opening inbound ports.
1h
10K+