Christian Posta

mcp-stateless. Python

field-agentic-labs. Labs for Field Engineering and AI Solution Architecture for all things agentic

ws4-secure-design-agentic-systems. Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems

substrate. Agent Substrate: the core system

openscreen. Create stunning demos for free. Open-source, no subscriptions, no watermarks, and free for commercial use. An alternative to Screen Studio.

nono. Sandbox any AI agent in seconds - zero setup, zero latency.

identerati-office-hours. Schedule / Archive : Identerati Office Hours Livestream

microsandbox. 🧱 easy fast local-first microVM runtime and library

neotoma. Deterministic, versioned state layer for AI agents

doc-spec.

credential-broker-4-agents. IETF Internet-Draft: Credential Broker for Agents (CB4A) - secure credential mediation for AI agent infrastructure

tokenetes. Transaction Tokens Service

agent-auth-protocol. TypeScript

tokenetes. Transaction Tokens Service

agentevals. agentevals is a framework-agnostic evaluations solution based on OpenTelemetry traces

enterprise-mcp-flow. Agentgateway Example repo for MCP flows with Atlassian, GitHub and Gitlab using VSCode or Cursor

aws-agentcore-demo. Python

mcp-kubernetes-server. A Model Context Protocol (MCP) server that enables AI assistants to interact with Kubernetes clusters. It serves as a bridge between AI tools (like Claude, Cursor, and GitHub Copilot) and Kubernetes, translating natural language requests into Kubernetes operations and returning the results in a format the AI tools can understand.

AAuth. explainer for AAuth

microsoft-identity-web. Helps creating protected web apps and web APIs with Microsoft identity platform and Azure AD B2C

agentregistry. Fast-track AI innovation with a centralized, trusted, curated registry

sandbox-runtime. A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

agentic-demo-repo. Example code/configs for all frameworks (CrewAI, kagent, ADK, etc.), MCP, fine-tuning, and AI gateways

mcp-secret-wrapper. Astrix Security MCP Secret Wrapper

x402. A payments protocol for the internet. Built on HTTP.

cerbos. Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

spiffe-dcr-keycloak. This is a DCR SPI implementation for keycloak that can take SPIFFE SVID JWT with software statements and create a client.

saf-mcp. SAF-MCP is a comprehensive security framework for documenting and mitigating threats in the AI Agent ecosystem.

mcp-auth-step-by-step. Step by step walkthrough of an MCP Authorization implementation

vscode-copilot-chat. Copilot Chat extension for VS Code

k8s-500-prod-issues.

dns-for-agents. Python

gateway-api-bench. Gateway API Benchmarks provides a common set of tests to evaluate a Gateway API implementation.

vegeta. HTTP load testing tool and library. It's over 9000!

guidance-for-deploying-model-context-protocol-servers-on-aws. This Guidance demonstrates how to securely run Model Context Protocol (MCP) servers on the AWS Cloud using containerized architecture. It helps organizations implement industry-standard OAuth 2.0 authentication while protecting server deployments with multiple security layers, including content delivery networks and web application firewalls.

mcp. Open source MCP Servers for AWS

agentgateway. Next Generation Agentic Proxy for AI Agents and MCP servers

A2A. Agent2Agent (A2A) is an open protocol enabling communication and interoperability between opaque agentic applications.

siren. Structured Interface for Representing Entities, super-rad hypermedia

vscode-intellij-idea-keybindings. Port of IntelliJ IDEA key bindings for VS Code.

fake-llm. Python

llm-router. Route LLM requests to the best model for the task at hand.

toolbox. Tools for testing Istio

ambient-multicluster-workshop.

awesome-mcp-servers. A collection of MCP servers.

powerlevel10k. A Zsh theme

gloomesh-demo. Shell

kagent. Cloud Native Agentic AI | Discord: https://bit.ly/kagentdiscord

k8s-nim-operator. An Operator for deployment and maintenance of NVIDIA NIMs and NeMo microservices in a Kubernetes environment.

gateway-api-inference-extension. Gateway API Inference Extension

ollama-helm. Helm chart for Ollama on Kubernetes

presidio. An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

litellm. The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]

ollama. Get up and running with Kimi-K2.6, GLM-5.2, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

GPT-Agents. Repository for the book GPT-Agents, published by Manning Publications

aig-lb-failover-demo. Shell

spectral. A flexible JSON/YAML linter for creating automated style guides, with baked in support for OpenAPI (v3.1, v3.0, and v2.0), Arazzo v1.0, as well as AsyncAPI v2.x.

ingress2gateway. Convert Ingress resources to Gateway API resources

learning-ebpf. Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

design-cfps. Repo to store Cilium CFP design docs

pamspy. Credentials Dumper for Linux using eBPF

netshoot. a Docker + Kubernetes network trouble-shooting swiss-army container

myYouTube_cilium_part1. Shell

pgrouter. Example of how to use the spiffe id from an mTLS connection to remove the need for a password on Postgres.

online-boutique.

surveys. 📝📊 CNCF Survey Data

merbridge. Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.

fieldctl. A cli to operate Lima and vcluster

bumblebee. Get eBPF programs running from the cloud to the kernel in 1 line of bash

cilium-service-mesh-beta. Instructions and issue tracking for Service Mesh capabilities of Cilium

network-explorer. C++

colima. Container runtimes on macOS (and Linux) with minimal setup

fullstack-tutorial. 🚀 The Apollo platform tutorial app

graphql-schema-language-cheat-sheet. GraphQL Shorthand Notation Cheat Sheet

3scale-service-mesh-hackathon. Shell

istio-ocp-install.

istio-upgrade-demo. Upgrading Istio with 0 downtime

istio-spire. Istio identity with SPIFFE/SPIRE

istio-app-simulator. Go

computer-science. 🎓 Path to a free self-taught education in Computer Science!

service-mesh-benchmark. Shell

kcp. Kubernetes-like control planes for form-factors and use-cases beyond Kubernetes and container workloads.

istio-demos. Shell

hoot. code from hoot episodes

envoy-preflight. A wrapper for applications to help with running envoy as a sidecar

envoyctl. JavaScript

bank-vaults. A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

kamus. An open source, git-ops, zero-trust secret encryption and decryption solution for Kubernetes applications

awesome-apm. A list of awesome APM products (commercial and OSS)

jiq. jid on jq - interactive JSON query tool using jq expressions

dive. A tool for exploring each layer in a docker image

kube-ps1. Kubernetes prompt info for bash, fish, and zsh

wasm-extensions. Contains miscellaneous Wasm extensions for Istio

talk-yapc-asia-2015. talk-yapc-asia-2015

cass-config-builder. Configuration builder for Apache Cassandra based on definitions at datastax/cass-config-definitions

spring-k8s-cassandra-microservices. Example microservices with Spring, Kubernetes, and Cassandra

istio-csr. istio-csr is an agent that allows for Istio workload and control plane components to be secured using cert-manager.

opa-envoy-plugin. A plugin to enforce OPA policies with Envoy

scuttle. A wrapper for applications to help with running Istio Sidecars

csi-driver. A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes

gateway-api. Repository for the next iteration of composite service (e.g. Ingress) and load balancing APIs.

step-sds. 🔭 Secret discovery service (SDS): simplifying certificate management for relying parties (such as Envoy)

chaos-mesh. A Chaos Engineering Platform for Kubernetes.

go-utils. golang utilities

kubefed. Kubernetes Cluster Federation

submariner. Networking component for interconnecting Pods and Services across Kubernetes clusters.

advanced-helm-demos. Advanced Helm usage demos

tutorial-istio-envoy-lua-filters. Lua

multi-mesh-examples. Examples for multi mesh

spec. WebAssembly for Proxies (ABI specification)

wasm-image-spec. wasm oci image specification

awesome-wasm-langs. 😎 A curated list of languages that compile directly to or have their VMs in WebAssembly

k8sniff. k8sniff - tcp ingress controller with SNI support

kourier. Kourier is a Knative Serving Ingress. It has been adopted by Knative, and we keep developing it at: github.com/knative/net-kourier

proposal. A repository for gRFCs

jumppad. Modern cloud native development environments

opa-demo. Open Policy Agent

bazel-cmakelists. Convert Bazel C++ targets to CMakeLists for IDEs

wasmtime. A lightweight WebAssembly runtime that is fast, secure, and standards-compliant

emscripten. Emscripten: An LLVM-to-WebAssembly Compiler

oras. OCI registry client - managing content like artifacts, images, packages

fake-service. Simple service for testing upstream service communications

shipyard. Consul and Kubernetes running on Docker https://shipyard.demo.gs/

kubebuilder. Kubebuilder - SDK for building Kubernetes APIs using CRDs

consul-service-mesh-for-developers. Respository containing configuration for KubeCon 2019 workshop

locust. Write scalable load tests in plain Python 🚗💨

Proxy-Benchmarks. Benchmarks for several proxies

thanos. Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project.

gloo_custom_authz. Shell

kubeman. The Hero that Kubernetes deserves

smi-sdk-go. Service Mesh Interface SDK for Go

installer. A modular, a-la-carte installer for Istio components. MOVED to https://github.com/istio/istio/tree/master/manifests

metrics-server. Scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.

consul-smi-controller. Experimental repository containing a Kubernetes controller for the Service Mesh Interface spec (SMI)

smi-adapter-istio. SMI adapter for Istio

ksniff. Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark

shipper. Kubernetes native multi-cluster canary or blue-green rollouts using Helm

smi-spec. Service Mesh Interface

glooshot. Chaos engineering framework to help you Immunize your service mesh

aws-app-mesh-inject. AWS AppMesh sidecar injector for EKS.

aws-app-mesh-roadmap. AWS App Mesh is a service mesh that you can use with your microservices to manage service to service communication

ship. A better way to deploy Kubernetes Helm charts

skywalking. APM, Application Performance Monitoring System

docker-json-server. JSON Server docker image, REST API mocking based on plain JSON

microservices-demo. Sample cloud-first application with 10 microservices showcasing Kubernetes, Istio, and gRPC.

meshery. Meshery, the cloud native manager

kube-router. Kube-router, a turnkey solution for Kubernetes networking.

aws-lambda-container-image-converter. The AWS Lambda container image converter tool (img2lambda) repackages container images (such as Docker images) into AWS Lambda function deployment packages and Lambda layers.

containers-roadmap. This is the public roadmap for AWS container services (ECS, ECR, Fargate, and EKS).

aws-app-mesh-examples. AWS App Mesh is a service mesh that you can use with your microservices to manage service to service communication.

amazon-api-gateway-developer-guide. The open source version of the Amazon API Gateway Developer Guide. To submit feedback or requests for changes, submit an issue or make changes and submit a pull request.

istio-operator. An operator that manages Istio deployments on Kubernetes

kubernetes-failure-stories. Compilation of public failure/horror stories related to Kubernetes

flagger. Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments)

pipeline. A cloud-native Pipeline resource.

diferencia. Tool to detect regressions between services

chaostoolkit. Chaos Engineering Toolkit & Orchestration for Developers

aws-event-sources. Knative event sources for AWS services

squash-operator. Squash Operator powered by Ansible tools and librairies provided by the Operator SDK

rbac-lookup. Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

doorman. Doorman: Global Distributed Client Side Rate Limiting.

aws-load-balancer-controller. A Kubernetes controller for Elastic Load Balancers

protolock. Protocol Buffer companion tool. Track your .proto files and prevent changes to messages and services which impact API compatibility.

krew. 📦 Find and install kubectl plugins

hey. HTTP load generator, ApacheBench (ab) replacement

kubesquash. A debugger for Kubernetes applications.

squash. The debugger for microservices

java-opentracing-walkthrough. A self-guided OpenTracing walkthrough / demo project

eks-workshop. AWS Workshop for Learning EKS

eksctl. The official CLI for Amazon EKS

kgateway. The Cloud-Native API Gateway and AI Gateway

cellery-spec.

microservices-integration-ballerina. Ballerina

kocircuit. Ko: A generic type-safe language for concurrent, stateful, deadlock-free systems and protocol manipulations

go-memdb. Golang in-memory database built on immutable radix trees

twirp. A simple RPC framework with protobuf service definitions

istio-refcard. HTML

cert-manager. Automatically provision and manage TLS certificates in Kubernetes

camel-k. Apache Camel K is a lightweight integration platform, born on Kubernetes, with serverless superpowers

3scale-istio-adapter. Red Hat 3scale Istio Mixer Adapter - Add 3scale's API Management to the Service Mesh

mtls-go-example. Simple example using mutual TLS authentication with a Golang server

mtls-go-example. Simple example using mutual TLS authentication with a Golang server

TLS-Redirection. TLS Redirection

openshift-hybridizer. All in One Openshift Cluster Hybrid Cloud Provisioner

spec. CloudEvents Specification

serving. Kubernetes-based, scale-to-zero, request-driven compute

docs. User documentation for Knative components.

eventing. Event-driven application platform for Kubernetes

kiali. Kiali project, observability for the Istio service mesh

oscon_2018. Tutorial content for "Comprehensive container based service monitoring with Kubernetes and Istio"

modernize-apps-katacoda. Katacoda scenarios for learning how to modernize existing apps using JBoss and OpenShift

APILifecycleManagement. Shell

vistio. Visualize your Istio mesh using Netflix's Vizceral

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

gitops-istio. A GitOps recipe for Progressive Delivery with Flux v2, Flagger and Istio

gitkube. Build and deploy docker images to Kubernetes using git push

flux. Successor: https://github.com/fluxcd/flux2

rotor. Go

envoy-amqp. An AMQP-HTTP bridge based on Envoy and Qpid Proton

coolstore-microservice. CoolStore is a containerised polyglot microservices application consisting of services based on JBoss, NodeJS, Spring Boot, WildFly Swarm, Vert.x, Netflix OSS and more running on OpenShift