Kubernetes

In our kubernetes clusters we use various resources and some terminology. An inventory of services we provide and a glossary of terms can be found below.

Services

Purpose	Service	Link	CNCF Link
Certificate Management	Cert Manager	https://cert-manager.io/	https://www.cncf.io/projects/cert-manager/
Cluster Ingress	Kubernetes Gateway API	https://gateway-api.sigs.k8s.io/	[N/A Part of Kubernetes
Cluster Mesh	Istio (Ambient Mode)	https://istio.io/	https://www.cncf.io/projects/istio/
Continuous Delivery	Argo CD	https://argo-cd.readthedocs.io/en/stable/	https://www.cncf.io/projects/argo/
Cost Insights	Vantage	https://www.vantage.sh/	N/A PGT Partner
DNS Record Management	External DNS	https://github.com/kubernetes-sigs/external-dns	N/A A Kubernetes-sigs project
Intrusion Detection	Falco Security	https://falco.org/	https://www.cncf.io/projects/falco/
Monitoring/Logs	Grafana Cloud	https://grafana.com/products/cloud/	N/A Using Open Source projects from a CNCF Platinum Member
Node Autoscaling	Karpenter	https://karpenter.sh/	N/A A Kubernetes-sigs project (Core donated by AWS, Cloud specific implementations maintained by cloud providers)
Node Patch Management (Linux Only)	Kured	https://kured.dev/	https://www.cncf.io/projects/kured/
Open Policy Enforcement	Gatekeeper	https://open-policy-agent.github.io/gatekeeper/website/	https://www.cncf.io/projects/open-policy-agent-opa/
Pod Autoscaling	Keda	https://keda.sh/	https://www.cncf.io/projects/keda/
Secrets Management	External Secrets Operator	https://external-secrets.io/latest/	https://www.cncf.io/projects/external-secrets/
Vulnerability Scanning	Trivy Operator	https://aquasecurity.github.io/trivy-operator/latest/	N/A Aqua Security is a CNCF Silver Member