kubeasz

KubeArmor is a runtime security and protection tool for Kubernetes environments that uses Linux security modules to enforce runtime policies and prevent malicious or disallowed commands from executing. Its prevention mode blocks commands at execution time rather than merely alerting afterward; in the demonstrated example, an attempted `ls` command fails.

Kubernetes The Hard Way is a hands-on tutorial for learning how Kubernetes components fit together by bootstrapping a cluster manually, without automation scripts. It covers provisioning compute resources, creating a certificate authority and TLS credentials, generating authentication and encryption configuration, bootstrapping etcd, the control plane and worker nodes, configuring remote kubectl access, setting up pod network routes, testing the cluster, and cleaning it up. The guide targets a basic cluster with a single control-plane node and two worker nodes on four ARM64 or AMD64 virtual or physical machines. Its README lists Kubernetes, containerd, CNI, and etcd component versions, and states that the resulting cluster is intended for learning rather than production use. The repository is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International.

Cluster API is an open-source Kubernetes subproject focused on declarative APIs and tooling for provisioning, upgrading, and operating multiple Kubernetes clusters. Developed by the Kubernetes SIG Cluster Lifecycle, it uses Kubernetes-style APIs and patterns to define cluster configuration and supporting infrastructure—including virtual machines, networks, load balancers, and VPCs—for consistent, repeatable deployments. Providers extend it to infrastructure platforms such as AWS, Azure, and vSphere, while kubeadm is provided as a built-in bootstrap and control-plane provider.

Kustomize is a Kubernetes configuration customization tool sponsored by the Kubernetes SIG CLI. It processes raw, template-free YAML without modifying the original files, using declarative kustomization files to combine resources, apply patches and labels, generate resources such as ConfigMaps, and create overlays for development, staging, and production variants. It can wrap separately managed Kubernetes and CRD files and reference external files without copying their full contents into a repository. The resulting YAML can be emitted with `kustomize build` and applied directly with `kubectl`; Kustomize is also integrated into kubectl.

KEDA (Kubernetes Event-driven Autoscaling) is a lightweight Kubernetes component for scaling containerized workloads according to event-driven signals. It works alongside the Kubernetes Horizontal Pod Autoscaler and uses ScaledObjects and scalers to map applications to event sources, including queues, databases, metrics systems, cloud services, and HTTP traffic. KEDA supports deployments, jobs, and custom resources with a /scale sub-resource, including scaling workloads down to zero and back up when events require processing. Its HTTP add-on provides an interceptor that can receive or hold requests while an application has no active pods and help trigger scale-up. The project provides built-in scalers, supports custom and community-maintained scalers, and is vendor-agnostic across cloud providers and products.