Sascha Grunert

Production-Grade Container Scheduling and Management

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

A web application completely written in Rust. 🌍

Single dependency Kubernetes clusters for local testing, experimenting and development.

Arena based tree 🌲 structure by using indices instead of reference counted pointers

A series of blog posts and talks about the world of containers 📦

The Git Commit Message and Changelog Generation Framework :book:

A framework for performing live pre-recorded command line demos in the wild 📼

A tiny neural network 🧠

Visualize vertical data inside your terminal 💦

Command line parsing in go, with coloring support 🌈

Functional additions to C

My hand crafted .dotfiles 🤚🛠❤️

Continuous performance analysis reports for software projects 🤖

A Linux kernel module written in Rust

Command line tool for diffing go module dependency changes between versions 📔

The blog post about Kubeflow, including all materials

Cargo inspired build system for C based projects

Packet parsing for the Internet Protocol Suite 📦

Router extension to yew

Microservice template using Rust and Cap'n Proto RPCs.

Dynamic packet parsing within trees 🌲🌳🌴

Demo material used for the Podman talk at FOSDEM 2020

Rust on STM32H7 Microcontrollers

ebpf syscall recording demo project

A GPU accelerated status bar written in Rust 🦄

A collaborative resource planning tool 🔮

umask observability based on bpftrace for OpenShift nodes

CRI-O Demonstration Material

My own little logger ✏️

Bring Your Own Public Key Infrastructure for container signing and verification demo

No description.

The Docker based Rust build toolchain

Nix Packages collection

The Docker based Haskell build toolchain

The canonical source for Kubernetes Operators that are published on OperatorHub.io and part of the default catalog of the Operator Lifecycle Manager.

Structured, pluggable logging for Go.

No description.

A markdown and man page documentation generator for go applications

Create interactive heatmap visualizations from KML files overlaid on real map tiles.

No description.

Test infrastructure for the Kubernetes project.

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Enhancements tracking repository for OKD

CLI and validation tools for Kubelet Container Runtime Interface (CRI) .

Canonical location of the OpenShift API definition.

CRI-O deb and rpm packages.

Developer productivity tools for Claude Code & other AI assistants

Release infrastructure for Kubernetes and related components

CRI-O Credential Provider to authenticate image pulls for registry mirrors by using Kubernetes Secrets.

Container monitor in Rust

The Kubernetes seccomp operator

This repo contains tooling around generating and publishing release notes for the Kubernetes organization.

Security profile merge library for Kubernetes CRI runtimes

Kubernetes website and documentation repo:

Container and file artifact promotion tooling for the Kubernetes project

Download kubernetes binaries more easily

Podman: A tool for managing OCI containers and pods.

A tool that facilitates building OCI images.

Work with remote images registries - retrieving information, images, signing content

Repo for SIG release

Kubernetes files for various *.k8s.io sites

Conformance test suite for OpenShift

OCI Runtime and Image Spec in Rust

My personal website

a CLI tool to compare CustomResourceDefinitions and identify breaking changes

Features tracking repo for Kubernetes releases

Container Signing

Meta configuration for Kubernetes Github Org

Kubernetes repository infrastucture tools

This project is the repo for registry.k8s.io, the production OCI registry service for Kubernetes' container image artifacts

No description.

A set of reusable GitHub actions based on the Kubernetes Release Engineering Tooling

Zeitgeist: the language-agnostic dependency checker

No description.

Markdown table-of-contents generator

Go module to generate and transform VEX documents

No description.

A fast and lightweight fully featured OCI runtime and C library for running containers

Statically generated docs for Prow (the tool that currently resides in kubernetes/test-infra). For historical reasons Prow lives in kubernetes/test-infra along with other things, but this repo is all about Prow.

Kubernetes community content

Release tooling for OpenShift Origin

KAL - The Kube API Linter

No description.

Tools to work with bibliographic records encoded in PICA+.

Container runtime written in Rust

A utility to generate SPDX-compliant Bill of Materials manifests

Node Resource Interface

Work with containers' images

Go client for Kubernetes.

A Commander for modern Go CLI interactions

No description.

Cloud Native Artifacial Intelegence Model Format Specification

Location for shared common files in github.com/containers repos.

Container Runtime Interface (CRI) – a plugin interface which enables kubelet to use a wide variety of container runtimes.

An OCI container runtime monitor.

website content

Code behind the robot to publish from staging to real repositories.

Command-line interface for managing OpenBuildService (OBS) assets

No description.

Software Supply Chain Transparency Log

OpenShift 3 and 4 product and community documentation

Customization of kubernetes YAML configurations

An open and reliable container runtime

Go bindings to systemd socket activation, journal, D-Bus, and unit files

Code for kubernetes.dev

Go Plugin System over WebAssembly

Kubernetes IN Docker - local clusters for testing Kubernetes

Generators for kube-like API types

a C library for accessing OCI runtime and image spec files

Performance tests and benchmarks

Rust friendly bindings to *nix APIs

The most used Rust library for date and time handling.

Cap'n Proto library and code generator for Go

No description.

Container Runtime Interface client implementation

The Command Line Interface to work with an Open Build Service

No description.

Encryption libraries for Encrypted OCI Container images

No description.

A Go module for interacting with gh and the GitHub API from the command line.

GitHub’s official command line tool

golang linter for ginkgo and gomega

Linters Runner for Go. 5x faster than gometalinter. Nice colored output. Can report only new issues. Fewer false-positives. Yaml/toml config.

No description.

Deploy a Production Ready Kubernetes Cluster

eBPF-based Networking, Security, and Observability

KubeCon NA 2023 CRI-O demos

Automatically provision and manage TLS certificates in Kubernetes

A ps(1) AIX-format compatible golang library

👩🏿‍🎓👨🏽‍🎓👩🏻‍🎓CNCF Mentoring + CommunityBridge + Summer of Code

Knative Functions client API and CLI

Repo for the controller-runtime subproject of kubebuilder (sig-apimachinery)

Non-Kubernetes-specific utility libraries which are consumed by multiple projects.

Common go library shared across sigstore services and clients

Azure Blob Storage CSI driver

This driver allows Kubernetes to access NFS server on Linux node.

This is a place for various problem detectors running on the Kubernetes nodes.

Static provisioner of local volumes

A sidecar app which clones a git repo and keeps it in sync with the upstream.

Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.

This driver allows Kubernetes to access SMB Server on both Linux and Windows nodes.

The Kubernetes Package Manager

No description.

Builds Dockerfile using the Docker client (with squashing! and secrets!)

Some reference and example networking plugins, maintained by the CNI team.

Minimal and opinionated eBPF tooling for the Rust ecosystem

SHA1 implementation with collision detection.

BTFHub Archive provides BTF files for existing published kernels that don't support embedded BTF.

Distributed reliable key-value store for the most critical data of a distributed system

BDD Testing Framework for Go

Rust bindings to libbpf from the Linux kernel

OpenTelemetry API and SDK for Rust

“Zero setup” cross compilation and “cross testing” of Rust crates

A set of libraries for writing Crossplane controllers.

Common Vulnerability Scoring System (CVSS)

A transparent, highly scalable and cryptographically verifiable data store.

OCI Runtime Tools

Kubetest2 is the framework for launching and running end-to-end tests on Kubernetes.

Tools and utilities to parse OWNERS, OWNER_ALIASES in kubernetes related github orgs

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

Cosign Github Action

Fast and Lightweight Logs and Metrics processor for Linux, BSD, OSX and Windows

KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes

Golang security checker

No description.

Codebase for sigstore.dev

Helper methods for Magefiles

Kata Containers version 2.x repository. Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

A License Classifier

No description.

Operator Registry runs in a Kubernetes or OpenShift cluster to provide operator catalog data to Operator Lifecycle Manager.

Container Network Interface - networking for Linux containers

Kubernetes Virtualization API and runtime in order to define and manage virtual machines.

An Operator that will be able to gather debugging/profiling data over a custom period of time which would be helpful to troubleshoot and resolve issues for OpenShift customers.

No description.

OCI Runtime Specification

Auditing for TLS certificates (Go code)

FUSE implementation for overlayfs

OpenShift Data Foundation Meta Operator

eBPF library for Go, wrapping libbpf

OpenShift 4.5 Installer for Equinix Metal

General purpose container library

Analyzes resource usage and performance characteristics of running containers.

Shortnames project is collecting registry alias names for shortnames to fully specified container image names.

OCI hook to trace syscalls and generate a seccomp profile

No description.

Helpers for going from apis and clients to useful runtime constructs

The main libseccomp repository

📜Fork for tracking CNCF projects

CLI tool for spawning and running containers according to the OCI specification

CoreDNS is a DNS server that chains plugins

Manage the OpenShift monitoring stack

Install an OpenShift 4.x cluster

runc container cli tools

No description.

Bash Automated Testing System

flannel is a network fabric for containers, designed for Kubernetes

Build software only once and put it in a global cache

SUSE Linux Enterprise support utilities. Gathers system information.