CNCF Projects
All projects of the Cloud Native Computing Foundation are classified with one of three stages of maturity:
CNCF Graduation Criteria are documented in the CNCF TOC repo. The document describes the maturity stages of the projects.
Graduated Projects
Argo
Kubernetes-native tools to run workflows, manage clusters, and do GitOps right.
containerd
An open and reliable container runtime
CoreDNS
CoreDNS is a DNS server that chains plugins
CRI-O
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
Envoy
Cloud-native high-performance edge/middle/service proxy
etcd
Distributed reliable key-value store for the most critical data of a distributed system
Fluentd
Fluentd: Unified Logging Layer (project under CNCF)
Flux
Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.
Harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
Helm
The Kubernetes Package Manager
Istio
Simplify observability, traffic management, security, and policy with the Istio service mesh.
Jaeger
CNCF Jaeger, a Distributed Tracing Platform
Keda
KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
Kubernetes
Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications
Linkerd
Ultra light, ultra simple, ultra powerful. Linkerd adds security, observability, and reliability to Kubernetes, without the complexity.
Open Policy Agent (OPA)
An open source, general-purpose policy engine.
Prometheus
The Prometheus monitoring system and time series database.
Rook
Open Cloud-Native Storage for Kubernetes
SPIFFE
The SPIFFE Project
SPIRE
The SPIFFE Runtime Environment
The Update Framework (TUF)
Python reference implementation of The Update Framework (TUF)
TiKV
A distributed transactional key-value database. Based on the design of Google Spanner and HBase, but simpler to manage and without dependencies on any distributed filesystem
Vitess
MySQL-compatible, horizontally scalable, cloud-native database solution.
Incubating Projects
Backstage
Backstage is an open platform for building developer portals
Buildpacks
CLI for building apps using Cloud Native Buildpacks
cert-manager
Automatically provision and manage TLS certificates in Kubernetes
Chaos Mesh
A Chaos Engineering Platform for Kubernetes.
Cilium
eBPF-based Networking, Security, and Observability
Cloud Custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
CloudEvents
Standardizing common eventing metadata and their location to help with event identification and routing.
Container Network Interface (CNI)
Container Network Interface - networking for Linux containers
Contour
Contour is a Kubernetes ingress controller using Envoy proxy.
Cortex
A horizontally scalable, highly available, multi-tenant, long term Prometheus.
Crossplane
Cloud Native Control Planes
CubeFS
CubeFS is a cloud native file storage
Dapr
Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge.
Dragonfly
Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project.
Emissary-Ingress
open source Kubernetes-native API gateway for microservices built on the Envoy Proxy
Falco
Cloud Native Runtime Security
gRPC
The C based gRPC (C++, Python, Ruby, Objective-C, PHP, C#)
in-toto
in-toto is a framework to protect supply chain integrity.
Keptn
Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications.
Keycloak
Keycloak is an open-source identity and access management solution for modern applications and services, built on top of industry security standard protocols.
Knative
Knative is a developer-focused serverless application layer which is a great complement to the existing Kubernetes application constructs. Knative consists of three components: an HTTP-triggered autoscaling container runtime called “Knative Serving”, a CloudEvents-over-HTTP asynchronous routing layer called “Knative Eventing”, and a developer-focused function framework which leverages the Serving and Eventing components, called "Knative Functions".
KubeEdge
Kubernetes Native Edge Computing Framework (project under CNCF)
Kubeflow
The Kubeflow project is dedicated to making deployments of machine learning workflows on Kubernetes simple, portable and scalable by providing a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures.
KubeVela
The Modern Application Platform.
KubeVirt
Kubernetes Virtualization API and runtime in order to define and manage virtual machines.
Kyverno
Kubernetes Native Policy Management
Litmus
Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is at https://hackmd.io/a4Zu_sH4TZGeih-xCimi3Q
Longhorn
Cloud-native distributed storage for Kubernetes
NATS
NATS.io is a connective technology for distributed systems and is a perfect fit to connect devices, edge, cloud or hybrid deployments. True multi-tenancy makes NATS ideal for SaaS and self-healing and scaling technology allows for topology changes anytime with zero downtime.
Notary
A CLI tool to sign and verify OCI artifacts and container images
OpenKruise
Automated management of large-scale applications on Kubernetes (project under CNCF)
OpenMetrics
Evolving the Prometheus exposition format into a standard.
OpenTelemetry
OpenTelemetry Java SDK
Operator Framework
SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
Thanos
Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project.
Volcano
A Cloud Native Batch System (Project under CNCF)
Sandbox Projects
Aeraki Mesh
Aeraki Mesh allows you to manage any layer-7 traffic in a service mesh
Akri
A Kubernetes Resource Interface for the Edge
Antrea
Kubernetes networking based on Open vSwitch
Armada
A multi-cluster batch queuing system for high-throughput workloads on Kubernetes.
Artifact Hub
Find, install and publish Kubernetes packages
Athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures
BFE
Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd
Capsule
Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with the minimalist approach, leveraging only on upstream Kubernetes.
Carina
Carina: an high performance and ops-free local storage for kubernetes
Carvel
Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes.
CDK for Kubernetes (CDK8s)
CDK8s lets you define Kubernetes apps and components using familiar programming languages and object-oriented APIs.
Chaosblade
An easy to use and powerful chaos engineering experiment toolkit.(阿里巴巴开源的一款简单易用、功能强大的混沌实验注入工具)
Clusternet
[CNCF Sandbox Project] Managing your Kubernetes clusters (including public, private, edge, etc.) as easily as visiting the Internet ⎈
Clusterpedia
Clusterpedia is used for complex resources search across multiple clusters, support simultaneous search of a single kind of resource or multiple kinds of resources existing in multiple clusters.
CNI-Genie
CNI-Genie for choosing pod network of your choice during deployment time. Supported pod networks - Calico, Flannel, Romana, Weave
Confidential Containers
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
ContainerSSH
ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users required.
Curiefense
Curiefense is a unified, open source platform protecting cloud native applications.
Curve
Curve is a distributed storage system designed and developed independently by NetEase, featured with high performance, high availability, high reliability and well expansibility, and it can serve as the basis for storage systems designed for different scenario.
Devfile
Kube-native API for cloud development workspaces specification
DevSpace
DevSpace Cloud ⚡ Turn Kubernetes into a Powerful Developer Platform (new on-premise edition)
DevStream
DevStream: the open-source DevOps toolchain manager (DTM).
Dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Distribution
The toolkit to pack, ship, store, and deliver container content
Eraser
Eraser uses vulnerability data to remove non-running images from all Kubernetes nodes in a cluster.
external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
FabEdge
Secure Edge Networking Solution Based On Kubernetes
Fluid
Fluid is an orchestration platform for elastic data abstraction and acceleration in cloud native environment.
Fonio
Data first monitoring agent using (e)BPF, built on RedBPF
Headlamp
Extensible open source multi-cluster Kubernetes user interface
Hexa
Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.
HwameiStor
Hwameistor is an HA local storage system for cloud-native stateful workloads
Inclavare Containers
A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.
Inspektor Gadget
Open source eBPF debugging and data collection tool for Kubernetes and Linux
k3s
Lightweight Kubernetes
k8gb
A cloud native Kubernetes Global Balancer
K8up
Kubernetes and OpenShift Backup Operator
Karmada
Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration
Kepler
Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe energy related system stats and exports as Prometheus metrics.
Keylime
Bootstrap & Maintain Trust on the Edge / Cloud and IoT.
ko
Build and deploy Go applications
Konveyor
Konveyor Operator fully manages the deployment and life cycle of Konveyor (formerly Tackle) on Kubernetes and OpenShift.
kpt
Automate Kubernetes Configuration Editing
Krator
Kubernetes Rust State Machine Operator
Krustlet
Kubernetes Rust Kubelet
Kube-OVN
A Bridge between SDN and Cloud Native (Project under CNCF)
kube-rs
kube-rs is the core Rust ecosystem for building applications against Kubernetes
kube-vip
Kubernetes Virtual IP and Load-Balancer for both control plane and Kubernetes services
KubeArmor
Runtime protection for Kubernetes & other cloud Workloads. Kubearmor provides a observability and policy enforcement system to restrict any unwanted, malicious behaviour of cloud-native workloads at runtime.
KubeClipper
Manage kubernetes in the most light and convenient way.
KubeDL
Run your deep learning workloads on Kubernetes more easily and efficiently.
Kuberhealthy
A Kubernetes operator for running synthetic checks as pods. Works great with Prometheus!
Kubescape
Kubescape is an open source security and compliance platform that scans clusters, Kubernetes manifest files (YAML files, and Helm charts), code repositories, container registries and images. It detects misconfigurations according to frameworks such as the NSA-CISA, MITRE ATT&CK® and CIS, as well as software vulnerabilities, and calculates risk scores.
Kubewarden
Manage admission policies in your Kubernetes cluster with ease
Kubewarden (Wasm)
Manage admission policies in your Kubernetes cluster with ease
KUDO
Kubernetes Universal Declarative Operator (KUDO)
Kuma
🐻 The multi-zone service mesh for containers, Kubernetes and VMs. Built with Envoy. CNCF Sandbox Project.
Kured
Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS
Lima
Linux virtual machines, typically on macOS, for running containerd
Merbridge
Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.
Meshery
Meshery, the cloud native manager
MetalLB
A network load-balancer implementation for Kubernetes using standard routing protocols
Metal³
Bare metal host provisioning integration for Kubernetes
Microcks
Kubernetes native tool for mocking and testing API and micro-services
Network Service Mesh
CNCF is an open source software foundation that hosts and nurtures projects like Kubernetes and Prometheus.
Nocalhost
Nocalhost is Cloud Native Dev Environment.
Open Cluster Management
Core APIs for open cluster management
Open Policy Containers
A docker-inspired CLI for building, tagging, pushing, pulling, and signing OPA policies to and from OCI-compliant registries.
OpenCost
OpenCost provides visibility into current and historical Kubernetes spend and resource allocation.
OpenEBS
Leading Open Source Container Attached Storage, built using Cloud Native Architecture, simplifies running Stateful Applications on Kubernetes.
OpenELB
Load Balancer Implementation for Kubernetes in Bare-Metal, Edge, and Virtualization
OpenFeature
Standardizing Feature Flagging for Everyone
OpenFGA
OpenFGA is a high performance and flexible authorization/permission system built for developers and inspired by Google Zanzibar
OpenFunction
Cloud Native Function-as-a-Service Platform (CNCF Sandbox Project)
OpenFunction (Wasm)
Cloud Native Function-as-a-Service Platform (CNCF Sandbox Project)
OpenGitOps
Repository for top-level information about the OpenGitOps project
OpenYurt
An open platform that extending your native Kubernetes to edge.
ORAS
OCI registry client - managing content like artifacts, images, packages
Paralus
Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure and Zero trust Kubernetes with zero friction.
Parsec
Platform AbstRaction for SECurity service
PipeCD
GitOps style continuous delivery platform that provides consistent deployment and operations experience for any applications
Piraeus Datastore
The Piraeus Operator manages LINSTOR clusters in Kubernetes.
Pixie
Open source Kubernetes observability for developers
Porter
Porter enables you to package your application artifact, client tools, configuration and deployment logic together as an installer that you can distribute, and install with a single command.
Pravega
Pravega - Streaming as a new software defined storage primitive
SchemaHero
A Kubernetes operator for declarative database schema management (gitops for database schemas)
sealer
Build, Share and Run Both Your Kubernetes Cluster and Distributed Applications (Project under CNCF)
Serverless Devs
🔥🔥🔥 Serverless Devs developer tool ( Serverless Devs 开发者工具 )
Serverless Workflow
Serverless Workflow Specification
Service Mesh Interface (SMI)
Service Mesh Interface
Service Mesh Performance
Standardizing Service Mesh Value Measurement
Skooner
Simple Kubernetes real-time dashboard and management.
SlimToolkit
Inspect, Optimize and Debug Your Containers
SOPS
sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.
Strimzi
Kubernetes-native data streaming powered by Apache Kafka
Submariner
Submariner enables direct networking between Pods and Services in different Kubernetes clusters, either on-premises or in the cloud.
SuperEdge
An edge-native container management system for edge computing
Telepresence
Local development against a remote Kubernetes or OpenShift cluster
Teller
Cloud native secrets management for developers - never leave your command line for secrets.
Tinkerbell
A workflow engine for provisioning bare metal.
Tremor
Main Tremor Project Rust Codebase
Trickster
Open Source HTTP Reverse Proxy Cache and Time Series Dashboard Accelerator
Vineyard
Vineyard (v6d) is an in-memory immutable data manager.
Virtual Kubelet
Virtual Kubelet is an open source Kubernetes kubelet implementation.
Visual Studio Code Kubernetes Tools
The extension for developers building applications to run in Kubernetes clusters and for DevOps staff troubleshooting Kubernetes applications.
wasmCloud
Project homepage. wasmCloud allows for simple, secure, distributed application development using WebAssembly actors and capability providers.
WasmEdge (Wasm)
WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.
WasmEdge Runtime
WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.
werf
werf is a solution for implementing efficient and consistent software delivery to Kubernetes. It covers the entire CI/CD lifecycle and all related artifacts, glues commonly used tools (Git, Docker/Buildah, Helm, K8s) and facilitates best practices.
Xline
Xline is a high-performance geo-distributed metadata management system, which is compatible with the ETCD interface.
zot
Zot is an OCI-native container registry for distributing container images and OCI artifacts.
Non-code Projects
Cloud Native Glossary
“The Cloud Native Glossary is a project led by the CNCF Business Value Subcommittee. Its goal is to explain cloud native concepts in clear and simple language without requiring any previous technical knowledge.” - Cloud Native Glossary
- Project Repository: https://github.com/cncf/glossary
- Contributor Guide: https://glossary.cncf.io/contribute/
- Chat: CNCF Slack:
#glossary
and#glossary-localizations
in cloudnative.slack.com - License: Apache 2.0 license. Documentation is distributed under CC BY 4.0.
Archived Projects
Brigade
Event-driven scripting for Kubernetes
Open Service Mesh
Open Service Mesh (OSM) is a lightweight, extensible, cloud native service mesh that allows users to uniformly manage, secure, and get out-of-the-box observability features for highly dynamic microservice environments.
OpenTracing
OpenTracing API for Go. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
rkt
[Project ended] rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.