Topics / #cncf

Cncf projects on GitHub

Cloud Native Computing Foundation ecosystem of projects and standards.

As of , the most-starred Cncf projects on GitHub are kubernetes (128.3K stars), netdata (81K stars) and prometheus (66.6K stars). GitHub.Locker tracks 43 Cncf repositories with 1.1M stars combined. The fastest-growing on October 16 was prometheus, with +23 stars in a day.

43Projects
1.1MStars in total
+200Stars in a day
Browse in the catalog →github.com/topics/cncf ↗

Hot right now

Most stars gained in a day · Oct 16

+23

prometheus

prometheus/prometheus · ★ 66.6K

Prometheus is a systems and service monitoring tool: it scrapes metrics from configured targets at set intervals, evaluates rule expressions over that data, displays results, and fires alerts when conditions are met.

+20

kubernetes

kubernetes/kubernetes · ★ 128.3K

Kubernetes (K8s) is an open source system for managing containerized applications across multiple hosts, handling the deployment, maintenance, and scaling of those applications.

+16

opentofu

opentofu/opentofu · ★ 30.5K

OpenTofu is an open-source tool for declaratively managing cloud infrastructure, letting you build, change, and version infrastructure safely and efficiently.

+15

netdata

netdata/netdata · ★ 81K

Netdata is an open-source, real-time infrastructure monitoring platform that collects per-second metrics, visualizes them, and detects anomalies with machine learning.

The all-time top

43 projects · by stars

  1. #1 · kubernetes/kubernetes

    kubernetes

    Kubernetes (K8s) is an open source system for managing containerized applications across multiple hosts, handling the deployment, maintenance, and scaling of those applications.

    128.3K
  2. #2 · netdata/netdata

    netdata

    Netdata is an open-source, real-time infrastructure monitoring platform that collects per-second metrics, visualizes them, and detects anomalies with machine learning.

    81K
  3. #3 · prometheus/prometheus

    prometheus

    Prometheus is a systems and service monitoring tool: it scrapes metrics from configured targets at set intervals, evaluates rule expressions over that data, displays results, and fires alerts when conditions are met.

    66.6K
  1. 4

    etcd

    52.4Ketcd-io/etcd · Go

    A distributed, reliable key-value store for the most critical data of a distributed system, written in Go and kept consistent across machines with the Raft consensus algorithm.

  2. 5

    backstage

    34.6Kbackstage/backstage · TypeScript

    An open source framework for building developer portals — one centralized place for your microservices, infrastructure tooling and documentation. Originally built at Spotify, now hosted by the CNCF.

  3. 6

    k3s

    34.2Kk3s-io/k3s · Go

    K3s is a lightweight, fully conformant, production-ready Kubernetes distribution packed into a single binary under 100 MB that runs with roughly half the memory of standard Kubernetes.

  4. 7

    go-zero

    33.4Kzeromicro/go-zero · Go

    go-zero is a cloud-native Go framework for building web and RPC microservices, packed with built-in engineering practices. It has been serving sites with tens of millions of users for years and is listed in the CNCF Landscape.

  5. 8

    minikube

    32.2Kkubernetes/minikube · Go

    Minikube runs a local Kubernetes cluster on macOS, Linux, or Windows so developers can build and test Kubernetes applications on their own machine.

  6. 9

    opentofu

    30.5Kopentofu/opentofu · Go

    OpenTofu is an open-source tool for declaratively managing cloud infrastructure, letting you build, change, and version infrastructure safely and efficiently.

  7. 10

    helm

    30.3Khelm/helm · Go

    Helm is the package manager for Kubernetes. It manages Charts — packages of pre-configured Kubernetes resources — so installing and managing applications in a cluster works like apt, yum or homebrew on your system.

  8. 11

    harbor

    29.6Kgoharbor/harbor · Go

    Harbor is an open source trusted cloud native registry that stores, signs, and scans content — mainly container images and Helm charts. It is a CNCF-hosted project.

  9. 12

    envoy

    29.1Kenvoyproxy/envoy · C++

    Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.

  10. 13

    cilium

    25.7Kcilium/cilium · Go

    Cilium is open-source networking, security, and observability software built on an eBPF dataplane, used mainly as the networking layer of Kubernetes clusters.

  11. 14

    argo-cd

    24.4Kargoproj/argo-cd · Go

    Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps your cluster state synced with a Git repository.

  12. 15

    slim

    23.4Kslimtoolkit/slim · Go

    SlimToolkit (formerly DockerSlim) is a free, open-source CLI toolkit that inspects, optimizes and debugs container images. It can shrink an image by up to 30x without you changing anything in your Dockerfile — and makes the result more secure too.

  13. 16

    sops

    23.4Kgetsops/sops · Go

    SOPS (Secrets OPerationS) is an editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats, encrypting values with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP.

  14. 17

    jaeger

    23.3Kjaegertracing/jaeger · Go

    Jaeger is a distributed tracing platform that helps you monitor and troubleshoot requests as they flow through microservices-based systems.

  15. 18

    serve

    21.9Kjina-ai/serve · Python

    Jina is an open-source Python framework for building multimodal AI applications on a cloud-native stack — you wrap models into gRPC microservices, chain them into flows, and scale from local to cloud.

  16. 19

    containerd

    21.4Kcontainerd/containerd · Go

    containerd is an industry-standard container runtime — a daemon for Linux and Windows that manages the complete container lifecycle of its host: image transfer and storage, container execution and supervision, and low-level storage and network attachments. It's a CNCF graduated project.

  17. 20

    vitess

    21.4Kvitessio/vitess · Go

    Vitess is a cloud-native distributed database system built around MySQL, designed for horizontal scaling.

  18. 21

    ingress-nginx

    19.5Kkubernetes/ingress-nginx · Go

    ingress-nginx was an Ingress controller for Kubernetes that used NGINX as a reverse proxy and load balancer to route traffic into clusters. The project is now retired.

  19. 22

    kubesphere

    17.1Kkubesphere/kubesphere · Go

    KubeSphere is a container platform built on Kubernetes for managing cloud-native apps across multi-cloud, datacenter, and edge environments. It adds a developer-friendly web console, multi-tenancy, DevOps workflows, and a plug-and-play extension ecosystem on top of your clusters.

  20. 23

    argo-workflows

    17Kargoproj/argo-workflows · Go

    An open source, container-native workflow engine for Kubernetes: it orchestrates parallel jobs where every step of your workflow runs as a container. It is a CNCF graduated project.

  21. 24

    tikv

    16.9Ktikv/tikv · Rust

    An open-source, distributed, transactional key-value database. Unlike traditional NoSQL systems, it offers not only classical key-value APIs but also transactional APIs with ACID compliance.

  22. 25

    kops

    16.7Kkubernetes/kops · Go

    kOps (Kubernetes Operations) is a tool that creates, upgrades, and manages production-grade, highly available Kubernetes clusters, and also provisions the underlying cloud infrastructure for them.

  23. 26

    kind

    15.6Kkubernetes-sigs/kind · Go

    kind (Kubernetes IN Docker) runs local Kubernetes clusters using Docker containers as 'nodes'. It was primarily designed for testing Kubernetes itself, but also works for local development or CI.

  24. 27

    charts

    15.4Khelm/charts · Go

    This was the canonical repository of community-curated Helm charts (stable and incubator) for installing applications on Kubernetes via Helm 2/3. It is now archived and obsolete, superseded by Artifact Hub.

  25. 28

    oauth2-proxy

    15.2Koauth2-proxy/oauth2-proxy · Go

    OAuth2 Proxy is an open-source reverse proxy that adds authentication to your web apps using OAuth2/OIDC providers like Google, Azure, GitHub or any generic OIDC provider.

  26. 29

    coredns

    14.4Kcoredns/coredns · Go

    A fast and flexible DNS server and forwarder written in Go, built as a chain of plugins — each plugin performs one DNS function. It is a graduated Cloud Native Computing Foundation (CNCF) project.

  27. 30

    thanos

    14.2Kthanos-io/thanos · Go

    Thanos is a set of components that turn existing Prometheus deployments into a highly available metric system with unlimited storage capacity. It is a CNCF Incubating project written in Go.

  28. 31

    cert-manager

    14.1Kcert-manager/cert-manager · Go

    cert-manager adds certificates and certificate issuers as resource types in Kubernetes, automating the process of obtaining, renewing, and using TLS certificates for workloads in a cluster.

  29. 32

    rook

    13.7Krook/rook · Go

    Rook is an open-source storage orchestrator for Kubernetes: it deploys and manages Ceph inside your cluster, turning Kubernetes itself into your storage platform.

  30. 33

    fluentd

    13.6Kfluent/fluentd · Ruby

    Fluentd is an open-source log collector that sits at the center of your logging setup: it gathers events from many data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and more.

  31. 34

    community

    13Kkubernetes/community · Jupyter Notebook

    The official Kubernetes community documentation — the starting point for joining and contributing to the Kubernetes project, whether by improving docs, improving code, or giving talks.

  32. 35

    nebula

    12.4Kvesoft-inc/nebula · C++

    NebulaGraph is an open-source distributed graph database built to handle large volumes of highly connected data with millisecond latency and quick horizontal scaling.

  33. 36

    crossplane

    12.2Kcrossplane/crossplane · Go

    Crossplane is a framework for building cloud native control planes without writing code. It orchestrates applications and infrastructure across any environment through a declarative, Kubernetes-style API.

  34. 37

    meshery

    12Kmeshery/meshery · TypeScript

    Meshery is a cloud native management plane that lets you configure, deploy, and visually manage Kubernetes clusters and other cloud native infrastructure across multiple clouds from one place.

  35. 38

    kubescape

    11.8Kkubescape/kubescape · Go

    Kubescape is an open-source Kubernetes security platform that scans clusters, YAML files, Helm charts, and container images for misconfigurations and vulnerabilities, covering the whole lifecycle from development to runtime.

  36. 39

    kubernetes-handbook

    11.6Krootsongjc/kubernetes-handbook · Mermaid

    This is a free Chinese-language ebook/handbook that teaches Kubernetes architecture and the cloud-native ecosystem, from container orchestration basics up through service mesh, serverless, and AI-native infrastructure.

  37. 40

    WasmEdge

    10.8KWasmEdge/WasmEdge · C++

    WasmEdge is a lightweight, high-performance, extensible WebAssembly runtime built for cloud-native, edge, and decentralized applications, powering serverless apps, microservices, smart contracts, and IoT devices.

  38. 41

    distribution

    10.7Kdistribution/distribution · Go

    The open source registry implementation for storing and distributing container images and other content — the toolkit to pack, ship, store, and deliver container content, built on the OCI Distribution Specification.

  39. 42

    velero

    10.3Kvelero-io/velero · Go

    Velero (formerly Heptio Ark) is an open-source tool for backing up and restoring Kubernetes applications: it protects your cluster resources and persistent volumes so you can recover after loss.

  40. 43

    litmus

    5.7Klitmuschaos/litmus · Go

    LitmusChaos is an open source, cloud-native chaos engineering platform built for Kubernetes that lets SREs and developers run controlled chaos experiments to find weaknesses before a real outage does.

Often tagged together