| 120,294 | Production-Grade Container Scheduling and Management | 2,563,221 | 1,169,625 | 53 days |
| 69,640 | Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS | 62,998 | 19,640 | 169 days |
| 62,568 | The Prometheus monitoring system and time series database. | 243,194 | 147,582 | 32 days |
| 61,464 | The Cloud Native Application Proxy | 161,827 | 105,473 | 25 days |
| 60,110 | MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license. | 215,385 | 63,045 | 115 days |
| 51,460 | Distributed reliable key-value store for the most critical data of a distributed system | 148,528 | 73,035 | 53 days |
| 42,643 | Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search | 654,468 | 343,404 | 3 days |
| 39,694 | TiDB - the open-source, cloud-native, distributed SQL database designed for modern applications. | 1,148,854 | 495,301 | 24 days |
| 39,216 | AI-Powered Photos App for the Decentralized Web 🌈💎✨ | 220,552 | 111,628 | 69 days |
| 37,903 | Connect, secure, control, and observe services. | 417,628 | 226,851 | 19 days |
| 31,816 | CockroachDB — the cloud native, distributed SQL database designed for high availability, effortless scale, and control over data placement. | 2,091,227 | 818,765 | — |
| 29,856 | A modern load testing tool, using Go and JavaScript | 814,254 | 74,608 | 34 days |
| 27,962 | The easiest, most secure way to use WireGuard and 2FA. | 358,338 | 153,256 | 12 days |
| 27,551 | Like Prometheus, but for logs. | 6,756,510 | 254,508 | 18 days |
| 27,520 | An open source trusted cloud native registry project that stores, signs, and scans content. | 146,807 | 62,955 | 24 days |
| 26,071 | OpenFaaS - Serverless Functions Made Simple | 102,003 | 1,897 | 163 days |
| 25,477 | Dapr is a portable runtime for building distributed applications across cloud and edge, combining event-driven architecture with workflow orchestration. | 246,986 | 73,145 | 13 days |
| 25,327 | Complete container management platform | 280,175 | 104,210 | 10 days |
| 23,617 | eBPF-based Networking, Security, and Observability | 1,739,191 | 210,876 | 4 days |
| 22,424 | CNCF Jaeger, a Distributed Tracing Platform | 89,323 | 55,744 | 37 days |
| 21,898 | Declarative Continuous Deployment for Kubernetes | 218,727 | 125,921 | 6 days |
| 19,794 | The easiest, and most secure way to access and protect all of your infrastructure. | 1,097,516 | 520,931 | 5 days |
| 19,426 | Ingress NGINX Controller for Kubernetes | 56,388 | 18,994 | 6 days |
| 18,849 | Analyzes resource usage and performance characteristics of running containers. | 37,484 | 13,815 | 23 days |
| 18,155 | | 545,988 | 267,593 | 4 days |
| 16,909 | Internet-scale OpenID Certifiedâ„¢ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. | 79,649 | 37,374 | 93 days |
| 16,684 | Agent for collecting, processing, aggregating, and writing metrics, logs, and other arbitrary data. | 413,078 | 238,740 | 27 days |
| 15,538 | Weaviate is an open-source vector database that stores both objects and vectors, allowing for the combination of vector search with structured filtering with the fault tolerance and scalability of a cloud-native database​. | 529,221 | 305,371 | 4 days |
| 13,953 | Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project. | 135,431 | 71,570 | 103 days |
| 13,793 | CoreDNS is a DNS server that chains plugins | 65,329 | 39,365 | 23 days |
| 13,413 | Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. | 119,404 | 50,865 | 93 days |
| 13,173 | JuiceFS is a distributed POSIX file system built on top of Redis and S3. | 87,065 | 17,253 | 68 days |
| 13,112 | Exporter for machine metrics | 22,816 | 3,960 | 106 days |
| 12,975 | An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos | 48,001 | 1,512 | 3 days |
| 12,930 | | 395,590 | 17,983 | 12 days |
| 12,497 | Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included. | 113,426 | 47,825 | 68 days |
| 12,437 | CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI. | 76,743 | 23,854 | 16 days |
| 12,161 | Secure environments for developers and their agents | 416,387 | 222,078 | 3 days |
| 11,279 | Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x. | 84,549 | 36,801 | 10 days |
| 11,192 | Open Policy Agent (OPA) is an open source, general-purpose policy engine. | 279,116 | 171,080 | 10 days |
| 11,181 | Continuous Profiling Platform. Debug performance issues down to a single line of code | 180,050 | 76,601 | 23 days |
| 10,910 | vCluster - Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It's cheaper than creating separate full-blown clusters and it offers better multi-tenancy and isolation than regular namespaces. | 92,449 | 19,399 | 10 days |
| 10,830 | A truly Open Source MongoDB alternative | 51,228 | 34,505 | 90 days |