Cilium

Istio is an open-source service mesh for integrating microservices, managing traffic, enforcing policies, and collecting telemetry with few or no service-code changes. Its control plane, Istiod, provides service discovery, configuration, and certificate management, while Envoy proxies handle service traffic and provide routing, circuit breaking, policy enforcement, and telemetry. In Ambient mesh mode, the Rust-based Ztunnel data-plane proxy provides secure connectivity and observability without sidecar proxies; the videos describe this mode as providing encrypted, mutually authenticated networking between agents and tools.

Cluster API is an open-source Kubernetes subproject focused on declarative APIs and tooling for provisioning, upgrading, and operating multiple Kubernetes clusters. Developed by the Kubernetes SIG Cluster Lifecycle, it uses Kubernetes-style APIs and patterns to define cluster configuration and supporting infrastructure—including virtual machines, networks, load balancers, and VPCs—for consistent, repeatable deployments. Providers extend it to infrastructure platforms such as AWS, Azure, and vSphere, while kubeadm is provided as a built-in bootstrap and control-plane provider.

Cynative is an open-source framework and CLI for building security agents with live, read-only access to code, cloud, and runtime infrastructure. It reasons across GitHub, GitLab, AWS, GCP, Azure, and Kubernetes as one system, using frontier models to investigate questions such as exposed resources, privilege escalation paths, infrastructure drift, and leaked credentials. For each investigation, Cynative generates and runs code in an ephemeral sandbox, queries APIs in parallel, cross-checks findings against live evidence, and traces findings to their origins. Its action gate resolves each call to the required IAM actions and applies a read-only policy before attaching credentials; the video also describes an auditable JSONL log of tool calls. Agents are defined as Markdown files containing a description and prompt, and can run interactively, non-interactively, or with piped findings. The project is distributed as a single open-source binary and supports configuring the model provider and model through environment variables.

NetBird is an open-source, WireGuard-based overlay networking and Zero Trust Network Access platform for connecting remote users, cloud and on-premises resources, edge devices, containers, and agents through peer-to-peer encrypted tunnels. Its agents manage WireGuard connections, obtain peer candidates through ICE and STUN, exchange connection information through a signaling service, and use a relay when direct connections fail. A centralized management service maintains network state, peer addresses, access policies, and configuration updates, while the admin interface supports identity-based access control, network segmentation, SSO, MFA, device posture checks, private DNS, routes, exit nodes, SSH, reverse proxying, activity logging, and integrations such as Terraform and Ansible. NetBird can run as a hosted cloud service or be self-hosted; its repository includes the client, management, signal, and relay components, with most code licensed under BSD-3-Clause and the management, signal, and relay directories under AGPLv3.