{"data":[{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale","category":"devops","url":"https://kubernetes.io","github":"https://github.com/kubernetes/kubernetes","pricing":"open-source","hook":"Kubernetes is what you need when Docker Compose is not enough.","whatsGood":"Declarative infrastructure scales to massive deployments. Self-healing restarts failed containers. Rolling updates minimize downtime. The ecosystem of operators extends capabilities.","theCatch":"Complexity is legendary. Small teams often do not need it. Operational burden is significant. The YAML can become unmanageable.","verdict":"Powerful but only worth it at scale.","addedAt":"2026-08-19","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","kubernetes","containers","workflows","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":128436,"starsPerWeek":199,"access":"free","archived":false,"repo":{"createdAt":"2014-06-06","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/kubernetes","html":"/gems/kubernetes","markdown":"/gems/kubernetes.md"}},{"slug":"helm","name":"Helm","tagline":"Apache-2.0 Kubernetes package manager","category":"devops","url":"https://helm.sh","github":"https://github.com/helm/helm","pricing":"open-source","hook":"Helm is the chart package manager when you want to install and upgrade Kubernetes apps as versioned releases, not raw YAML sprawl.","whatsGood":"Apache-2.0 CNCF. Charts, values overrides, release history, rollback. De-facto packaging lane for most K8s apps. Huge public chart ecosystem and OCI chart support.","theCatch":"K8s package manager - not Argo CD/Flux GitOps sync, not a cluster itself. Templating can become spaghetti; you still own values, secrets, and upgrade discipline. Not Kamal/Coolify for VMs.","verdict":"Apache-2.0 K8s packaging. Free forever; GitOps tools are a different layer.","addedAt":"2026-09-06","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","kubernetes","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":30335,"starsPerWeek":53,"access":"free","archived":false,"repo":{"createdAt":"2015-10-06","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/helm","html":"/gems/helm","markdown":"/gems/helm.md"}},{"slug":"k9s","name":"k9s","tagline":"Apache-2.0 terminal UI for Kubernetes","category":"devops","url":"https://k9scli.io","github":"https://github.com/derailed/k9s","pricing":"open-source","hook":"k9s is the Kubernetes TUI when kubectl get/describe loops are slower than navigating pods live.","whatsGood":"Apache-2.0 Go binary. Live views of pods, logs, resources, skins, plugins. Keyboard-first cluster ops without leaving the terminal.","theCatch":"K8s cluster TUI - not Helm packaging, not a dashboard SaaS. Needs a working kubeconfig and cluster access. Not Lens Electron GUI.","verdict":"Apache-2.0 K8s TUI. Free forever; you still bring the cluster.","addedAt":"2026-09-06","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["tui","self-host","permissive","kubernetes","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":34839,"starsPerWeek":86,"access":"free","archived":false,"repo":{"createdAt":"2019-01-25","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/k9s","html":"/gems/k9s","markdown":"/gems/k9s.md"}},{"slug":"tilt","name":"Tilt","tagline":"Apache-2.0 microservice dev loop for Kubernetes","category":"devops","url":"https://tilt.dev","github":"https://github.com/tilt-dev/tilt","pricing":"open-source","hook":"Tilt is `tilt up` for microservice teams who live in a local or remote Kubernetes cluster while they code.","whatsGood":"Apache-2.0. Tiltfile (Starlark) defines how services build, deploy, and live-update. UI shows build/deploy status across many services. Works with Docker/Podman builds and common local clusters. File sync / live update cuts full image rebuilds for many stacks.","theCatch":"Vs Skaffold/Garden/DevSpace: Tilt is the Kubernetes *dev control plane*, not a prod CD system and not a Dockerfile replacement (Earthly/BuildKit still own image recipes). You need a cluster and a willingness to learn Tiltfile. Not magic for non-container monoliths.","verdict":"Apache-2.0 K8s dev loop. Free forever; use when many services share one cluster while you type.","addedAt":"2026-09-09","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","kubernetes","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":10111,"starsPerWeek":24,"access":"free","archived":false,"repo":{"createdAt":"2018-08-07","pushedAt":"2026-10-15","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/tilt","html":"/gems/tilt","markdown":"/gems/tilt.md"}},{"slug":"stern","name":"stern","tagline":"Apache-2.0 multi-pod Kubernetes log tail","category":"devops","url":"https://github.com/stern/stern","github":"https://github.com/stern/stern","pricing":"open-source","hook":"stern is `kubectl logs -f` for a replica set when you want color-coded tails across pods and containers without a TUI.","whatsGood":"Apache-2.0. stern/stern — friendly fork of discontinued wercker/stern. Regex/label/resource queries (`deployment/nginx`), multi-container tails, color per pod, auto-follow as pods come and go. Go binary. Source github.com/stern/stern.","theCatch":"Vs k9s (full Kubernetes *TUI*): stern is the *multi-pod log tail CLI*, not a cluster navigator, not Helm, not a dashboard. Needs kubeconfig and RBAC to read logs. Not Loki/Vector (log pipelines).","verdict":"Apache-2.0 K8s log tail. Free forever; follow the fleet, not one pod at a time.","addedAt":"2026-09-13","featured":false,"domain":"DevOps","subSpecialty":"Kubernetes","subcategory":"Kubernetes","tags":["cli","tui","self-host","permissive","kubernetes","containers","observability","active"],"capabilities":["logs","k8s","cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":4895,"starsPerWeek":16,"access":"free","archived":false,"repo":{"createdAt":"2020-10-21","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/stern","html":"/gems/stern","markdown":"/gems/stern.md"}},{"slug":"kind","name":"kind","tagline":"Apache-2.0 Kubernetes clusters inside Docker","category":"devops","url":"https://kind.sigs.k8s.io","github":"https://github.com/kubernetes-sigs/kind","pricing":"open-source","hook":"kind is local Kubernetes when you need a real multi-node-ish cluster for CI or laptop tests and minikube is the heavier classic.","whatsGood":"Apache-2.0. kubernetes-sigs/kind (“Kubernetes IN Docker”). Creates kube clusters by running nodes as containers — fast bring-up for local dev and CI. Docs kind.sigs.k8s.io; SIG-sponsored. Source github.com/kubernetes-sigs/kind.","theCatch":"Vs k3d/k3s (lighter single-binary k8s), colima (container runtime host), and minikube: kind is *Kubernetes-in-containers*, not a production control plane and not a substitute for cloud quotas. Needs a working container runtime; multi-node “realism” is still fake under one Docker host.","verdict":"Apache-2.0 local kube. Free forever; spin a cluster in Docker, tear it down in CI.","addedAt":"2026-09-13","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","kubernetes","containers","testing","active"],"capabilities":["ci"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":15557,"starsPerWeek":37,"access":"free","archived":false,"repo":{"createdAt":"2018-09-12","pushedAt":"2026-10-13","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/kind","html":"/gems/kind","markdown":"/gems/kind.md"}},{"slug":"mirrord","name":"mirrord","tagline":"MIT local process as if it ran in-cluster; Teams/Operator paid","category":"devops","url":"https://metalbear.com/mirrord","github":"https://github.com/metalbear-co/mirrord","pricing":"open-source","hook":"mirrord lets a local process (or coding agent) talk to real cluster DNS, env, and traffic without deploying a new pod every edit.","whatsGood":"MIT OSS CLI. metalbear-co/mirrord. `mirrord exec` injects a layer so your laptop process uses the target pod’s network/files/env. Works with VS Code, JetBrains, and agent CLIs. Docs at metalbear.com/mirrord; source github.com/metalbear-co/mirrord.","theCatch":"Vs Tilt (K8s *dev control plane* / live-update) and Earthly (Earthfile *builds*): mirrord is *steal the pod’s context for a local process*, not a multi-service Tiltfile and not an image builder. Teams/Operator is paid (concurrent sessions, traffic filters, queue split, DB branching, RBAC). Cloud AI Agents is Enterprise-gated. Free path is the OSS CLI for individuals.","verdict":"MIT in-cluster local process. Free forever OSS CLI for one human; Operator/Teams and cloud-agent concurrency are the paid layer.","addedAt":"2026-09-14","featured":false,"domain":"DevOps","subSpecialty":"Kubernetes","subcategory":"Kubernetes","tags":["self-host","permissive","coding-agents","active"],"capabilities":["k8s","local","dev"],"surfaces":["Self-host"],"ecosystem":["Rust","Multi-platform"],"licenseModel":"OSS/MIT","githubStars":5371,"starsPerWeek":22,"access":"free","archived":false,"repo":{"createdAt":"2022-02-01","pushedAt":"2026-10-19","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/mirrord","html":"/gems/mirrord","markdown":"/gems/mirrord.md"}},{"slug":"cilium","name":"Cilium","tagline":"eBPF networking, security, and observability for Kubernetes","category":"devops","url":"https://cilium.io","github":"https://github.com/cilium/cilium","pricing":"open-source","hook":"Cilium replaces kube-proxy-era networking with eBPF datapaths for identity-aware network policy, load balancing, and Hubble observability.","whatsGood":"Apache-2.0 (cilium/cilium). CNCF-graduated Kubernetes networking/security/observability stack built on eBPF: L3–L7 policy, service mesh options, encryption, and Hubble flow visibility. The free path is the OSS project you run; docs at docs.cilium.io and product site at cilium.io.","theCatch":"Vs flannel/Calico defaults: Cilium is the deeper eBPF control plane — more power, more kernel/datapath expertise. Isovalent/Cisco commercial layers exist around the same codebase; self-host OSS carefully for upgrades and Hubble ops.","verdict":"Apache-2.0 eBPF Kubernetes networking. Default when identity-aware policy and Hubble flows beat plain CNI.","addedAt":"2026-09-21","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","security","kubernetes","observability","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":25684,"starsPerWeek":45,"access":"free","archived":false,"repo":{"createdAt":"2015-12-16","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/cilium","html":"/gems/cilium","markdown":"/gems/cilium.md"}},{"slug":"radar","name":"Radar","tagline":"Apache-2.0 Kubernetes web UI — topology, Helm, GitOps, audit, built-in MCP","category":"devops","url":"https://radarhq.io","github":"https://github.com/skyhook-io/radar","pricing":"open-source","hook":"Radar is a single-binary Kubernetes web UI that shows what is broken, why, and what changed — topology, resources, Helm, GitOps, live traffic, audit, upgrade impact — with a built-in MCP server so agents can inspect the same cluster context.","whatsGood":"Apache-2.0 (skyhook-io/radar). Free path: curl the install script or grab a release binary, then `kubectl radar` — no account, no agents on the cluster, no cloud sync required. Telemetry is opt-in (anonymous usage counts / coarse cluster facts only). Built-in MCP lets coding agents query cluster state through Radar. Useful when kubectl YAML dumps are too slow for day-2 ops and you want a laptop UI plus an agent-readable surface. ★~3.6k.","theCatch":"Browser UI, not a terminal — if you live in kubectl/k9s only, this is a different seat. The MCP reads and operates through Radar’s cluster context; it does not run agents for you. Scope RBAC tightly: whatever the kubeconfig can do, the UI and MCP can attempt. Paid Radar Cloud adds hosted multi-cluster and SSO while the OSS binary stays free. ★ climbed fast for the project’s age (~3.6k in under a year) — judge it on substance (views, MCP, single binary), not the badge. Young product; pin a release.","verdict":"Apache-2.0 K8s web UI + MCP when day-2 cluster visibility belongs in a browser — OSS binary free forever; Cloud is the paid multi-cluster/SSO line; watch the star heat.","addedAt":"2026-10-06","featured":false,"domain":"DevOps","subSpecialty":"Kubernetes","subcategory":"Kubernetes","tags":["mcp","web-ui","self-host","permissive","kubernetes","active"],"capabilities":["kubernetes","ui","mcp"],"surfaces":["MCP","Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":3851,"starsPerWeek":99,"access":"free","archived":false,"repo":{"createdAt":"2026-01-20","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/radar","html":"/gems/radar","markdown":"/gems/radar.md"}},{"slug":"kubescape","name":"Kubescape","tagline":"Apache-2.0 CNCF Kubernetes security — manifest and cluster scans, image CVEs, auto-fix, admission policies, MCP server","category":"devops","url":"https://kubescape.io","github":"https://github.com/kubescape/kubescape","pricing":"open-source","hook":"Kubescape is a CLI and optional in-cluster operator that scans Kubernetes clusters, YAML, Helm charts and Kustomize dirs against NSA-CISA, MITRE ATT&CK and CIS benchmarks, scans images for CVEs, and can rewrite manifests to fix what it finds.","whatsGood":"Apache-2.0 (kubescape/kubescape), a CNCF incubating project. Free path: brew install kubescape, kubectl krew install kubescape, or the install script, then kubescape scan against your current context, a manifests folder or a Git URL. --compliance-threshold turns it into a CI gate. kubescape fix patches manifests, kubescape patch uses Copacetic to patch vulnerable images, and kubescape vap manages Validating Admission Policies. The operator adds eBPF runtime detection through Inspektor Gadget, and kubescape mcpserver exposes results to AI assistants. Offline download for air-gapped clusters. ★~11.8k.","theCatch":"Created and still driven by ARMO, which sells a commercial platform on top, so expect docs and links to point there. Full-framework scans are noisy on a first run; pick one framework or a namespace scope before wiring it into CI. Image scanning wraps Grype, so it overlaps with Trivy if you already run that. The runtime operator is a real in-cluster footprint, not just a CLI.","verdict":"Free, broad Kubernetes posture scanning that fits in CI with one command — start with a single framework to tame the noise, and skip it if you have no Kubernetes.","addedAt":"2026-10-07","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["mcp","cli","self-host","local-first","permissive","security","kubernetes","active"],"capabilities":["mcp","cli"],"surfaces":["MCP","CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":11811,"starsPerWeek":44,"access":"free","archived":false,"repo":{"createdAt":"2021-08-12","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/kubescape","html":"/gems/kubescape","markdown":"/gems/kubescape.md"}},{"slug":"cloudnative-pg","name":"CloudNativePG","tagline":"Apache-2.0 Kubernetes operator for PostgreSQL clusters","category":"devops","url":"https://cloudnative-pg.io","github":"https://github.com/cloudnative-pg/cloudnative-pg","pricing":"open-source","hook":"CloudNativePG is a Kubernetes operator that manages PostgreSQL primary/standby clusters end to end: deployment, failover, backups, recovery and upgrades, all declared as Kubernetes resources.","whatsGood":"Apache-2.0 (cloudnative-pg/cloudnative-pg), release v1.30.1 (2026-09-23), a CNCF project. It integrates directly with the Kubernetes API instead of external HA tools like Patroni or Stolon, supports continuous backup to object storage with point-in-time recovery, rolling updates and declarative config that fits GitOps. ★~9.5k.","theCatch":"Running stateful databases on Kubernetes is only a good idea if your team already runs Kubernetes well; storage class and node failures become database problems. Backups still need testing. Commercial support comes from third parties listed in the project.","verdict":"The best way to run Postgres on Kubernetes, if you must run Postgres on Kubernetes.","addedAt":"2026-10-18","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Kubernetes","tags":["self-host","permissive","postgres","kubernetes","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":9466,"starsPerWeek":39,"access":"free","archived":false,"repo":{"createdAt":"2022-03-10","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/cloudnative-pg","html":"/gems/cloudnative-pg","markdown":"/gems/cloudnative-pg.md"}}],"meta":{"total":11,"count":11,"offset":0,"limit":null,"sort":"curated","sorts":["curated","catalog","new","stars","trending","name"],"filters":{"subcategory":"kubernetes"},"next":null,"categories":["agents","nextjs","python","shopify","databases","devops","design","observability","rust","payments","comms","notifications","libraries"],"tags":["mcp","cli","tui","api","sdk","desktop-app","web-ui","editor-plugin","self-host","local-first","free-tier","paid-only","paid-led","permissive","copyleft","source-available","license-unclear","coding-agents","local-llm","rag","memory","evals","browser-automation","scraping","sandbox","skills","voice","security","auth","payments","realtime","postgres","vector","kubernetes","containers","observability","testing","workflows","graphics-3d","git","active","stale","archived","young-repo","fast-stars"]}}