This project captures work in progress, and completed work for the Azure Core Container Upstream team
59
90 commits
updated Aug 11, 2026
This list of projects is maintained by the Azure Core Container Upstream team. This list is intended to help you make informed decisions about what projects to use (or not use) in the context of your goals (e.g. proof of concept vs. production). To make this decision you need to consider your goals, your need for formal support, the project's maturity, governance, version level, and your willingness to work in open source.
Projects listed on this page are open source that Microsoft maintain or contribute to. These projects are NOT covered by the Microsoft Azure support policy. To get help please search the open issues on the project using the links in the table. To communicate with the Azure Container Compute Upstream team please use the issues in this repo. If your issue isn't already represented, please open a new one. However, if you consume one of these projects as a part of a Microsoft or Azure product or service, you may be eligible for support through that product or service.
| Project Area | Project & (artifacts) | Goal | Project State & API Version | Communication | Use on Azure |
|---|---|---|---|---|---|
| Kubernetes Cluster Management | |||||
| Cluster API Azure Provider (releases) Tests | Self-managed clusters on Azure using Cluster API | Kubernetes SIGs: stable API: v1beta1 | #cluster-api-azure [email protected] GitHub issues | ||
| Kuberay (releases) Tests | Kubernetes operator that simplifies the deployment and management of Ray applications on Kubernetes | stable API: v1 | #Ray Slack GitHub issues | ||
| Image Builder (releases) Tests | Tools for building Kubernetes disk images | #image-builder [email protected] GitHub issues | |||
| Cluster API Add-on Provider for Helm (releases) Tests | Use Helm charts to manage the installation and lifecycle of Cluster API add-ons. | Kubernetes SIGs: maintenance API: v1beta1 | #cluster-api [email protected] GitHub issues | ||
| Cluster Autoscaler (releases) Tests | Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster. | Kubernetes: stable | #sig-autoscaling [email protected] GitHub issues | ||
| Cluster Autoscaler Provider Azure (releases) Tests | Azure provider for running Cluster Autoscaler on AKS and Azure self-managed clusters. | Kubernetes: stable | #sig-autoscaling [email protected] GitHub issues | ||
| Karpenter (releases) | Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster. | Kubernetes SIGs: stable | #karpenter Karpenter Community GitHub issues | ||
| Kubernetes SIG Scalability (Azure) (DRA) | Kubernetes standard performance and load test effort. | #sig-scalability GitHub issues | |||
| Kubernetes Enhancements | |||||
| Windows containers (kubernetes releases) Tests | Run Windows server containers with Kubernetes | Kubernetes: stable API: N/A | #sig-windows [email protected] Windows Community Forum GitHub issues | ||
| IPv4/v6 Dual-Stack (kubernetes releases) Tests | IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to Pods and Services. | Kubernetes: IPv6: beta Dual-stack: GA | #sig-network [email protected] GitHub issues | ||
| KMSv2 (blog (alpha) blog (beta)) | Encryption at rest of Kubernetes data in etcd using Key Management Service (KMS) v2 API | Kubernetes: GA API: v2 | #sig-auth-kms-dev GitHub issues | ||
| Structured Authentication Configuration (blog (beta)) | Structured authentication configuration in the Kubernetes API server. Initially, only a jwt configuration will be supported, which will serve as the next iteration of the existing OIDC authenticator. | Kubernetes: GA API: v1 | #sig-auth-authenticators-dev GitHub issues | ||
| Structured Authorization Configuration (blog (beta)) | Structured authorization configuration in the Kubernetes API serverintroducing a more structured and versatile way to configure the authorization chain, focusing on enabling multiple webhooks and providing explicit control mechanisms. | Kubernetes: GA API: v1 | #sig-auth-authorizers-dev GitHub issues | ||
| Move Storage Version Migrator in-tree | Move storage version migrator in-tree to make it easy for users to perform storage migrations. | Kubernetes: alpha API: v1alpha1 | #sig-api-machinery-storageversion-dev GitHub issues | ||
| DRA: ResourceSlice Status for Device Health Tracking | Enable DRA drivers to store device health and other device status in the ResourceSlice | Kubernetes: proposed | #wg-device-management GitHub issues | ||
| Extended Toleration Operators for Threshold-Based Placement | Add numeric comparison operators (Lt, Gt) to Tolerations for SLA-based scheduling with threshold-based taint matching. | Kubernetes: proposed | #sig-scheduling GitHub issues | ||
| ServiceAccount tokens for Image Pulls (blog (alpha)) | Enables kubelet credential providers to use pod-specific service account tokens for registry authentication, eliminating long-lived image pull secrets. | Kubernetes: beta API: N/A | #sig-auth-authenticators-dev GitHub issues | ||
| Ensure Image Pull Credential Verification (blog (alpha)) | It provides authorization to container image pulls for images already present on the node when these are requested with the IfNotPresent or Never image pull policy in a Pod. | Kubernetes: alpha API: v1alpha1 | #sig-auth-authenticators-dev GitHub issues | ||
| DRA: AdminAccess for ResourceClaims and ResourceClaimTemplates (blog (alpha)) | Enables privileged access to devices already in use by other users for administrative tasks like health monitoring, restricted to authorized namespaces. | Kubernetes: beta API: N/A | #wg-device-management GitHub issues | ||
| Cluster Trust Bundles | Cluster Trust Bundles make it easy to publish X.509 trust anchors and then consume them in cluster workloads. | Kubernetes: beta API: v1beta1 | #sig-auth-certificates-dev GitHub issues | ||
| Cloud Native Governance and Security | |||||
| OPA Gatekeeper (releases) | K8s native Open Policy Agent policy enforcement | Azure: GA (AKS and Arc) CNCF: graduated API: Config: v1alpha1; ConstraintTemplate: v1; Constraints: v1beta1; Mutation: v1; External Data: v1beta1 | #kubernetes-policy GitHub issues | ||
| Secrets Store CSI Driver (releases) Builds | Integrates secrets stores with Kubernetes via a Container Storage Interface (CSI) volume | Kubernetes: GA API: v1 | #csi-secrets-store GitHub issues | ||
| Azure KeyVault Provider for Secrets Store CSI Driver (releases) | Enables mounting AKV secrets as volumes in K8s pods | Azure: GA (AKS and Arc) API: N/A | GitHub issues | Use with AKS | |
| KMS Plugin for Key Vault (releases) | Enables encryption at rest of Kubernetes data in etcd using Azure Key Vault | Azure: GA (AKS) API: N/A | GitHub issues | Use with AKS | |
| Azure Workload Identity (releases) | Uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods based on Workload Identity federation | Azure: GA (AKS) API: N/A | GitHub issues | How to use (OSS) How to use (AKS) | |
| Eraser (releases) | Cleaning up images from Kubernetes nodes | CNCF: sandbox Azure: GA (AKS) API: v1 | #eraser GitHub issues | How to use (OSS) How to use (AKS) | |
| Copacetic (releases) | CLI tool for directly patching container images using reports from vulnerability scanners | CNCF: sandbox | #copa GitHub issues | How to use | |
| DALEC (releases) | Produce secure packages and containers with declarative configurations | Azure: incubating | GitHub issues | How to use | |
| Notation (releases) (Website) | A CLI tool to sign and verify OCI artifacts, from the Notary Project | CNCF: incubating | #notary-project in CNCF Slack GitHub issues | Sign container images with Notation in ACR | |
| Cloud Native Service Mesh | |||||
| Istio | The leading service mesh on Kubernetes | CNCF: graduated APIs: experimental, alpha, beta, stable | Istio Slack GitHub issues | Deploy Istio addon on AKS | |
| Gateway API | A sig-network subproject that establishes a specification for service networking in Kubernetes (ingress and service mesh) | Kubernetes: v1beta APIs: Standard and Experimental | #gateway-api in Kubernetes Slack GitHub issues | Use application gateway for containers | |
| Envoy Proxy | A high performance, cloud-native proxy | CNCF: graduated | Envoy Slack GitHub issues | ||
| Observability | |||||
| Inspektor Gadget (releases) (Website) | A set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF | CNCF: sandbox (since March 2023) | #inspektor-gadget in Kubernetes Slack GitHub issues | ||
| Container Runtime | |||||
| Moby (releases) | Toolkit for app containerization | #opencontainers Moby Forums GitHub issues | |||
| Containerd (releases) | Complete container lifecycle management on Linux and Windows hosts | CNCF: graduated API: N/A | #opencontainers [email protected] GitHub issues | ||
| Containerd runwasi (releases) | Facilitates running Wasm / WASI workloads managed by containerd | CNCF: alpha | #runwasi GitHub issues | ||
| Containerd Wasm Shims (releases) | containerd shims for running WebAssembly workloads in Kubernetes | DeisLabs: alpha | #GitHub Issues | ||
| Platforms | |||||
| Brigade | Event-driven scripting for Kubernetes | CNCF: Archived API: v2 | #brigade channel on Kubernetes Slack GitHub Issues | ||
| Deployment Tools | |||||
| Porter | Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command | CNCF: Sandbox Stable: v0.38.x Prerelease: v1.0.0-alpha | Mailing list, slack, etc Project Board | Azure Service Operator, Azure Trusted Research Environments | |
| CNAB Specification | Cloud Native Application Bundle Specification implemented by Porter | Spec: 1.1 | #cnab on CNCF Slack Issues | ||
| Web Assembly / WASI | |||||
| Hyperlight-Wasm | hyperlight-wasm is a rust library crate that enables Wasm Modules and components to be run inside lightweight Virtual Machine backed Sandbox. It is built on top of Hyperlight. | CNCF Sandbox | GitHub Issues | ||
| Virtualization | |||||
| Hyperlight | Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead. | CNCF Sandbox | #Hyperlight GitHub Issues | ||
| AI | |||||
| Kubernetes AI Toolchain Operator (KAITO) (releases) | Kubernetes operator that automates the AI/ML model inference or tuning workload in a Kubernetes cluster. | CNCF Sandbox | #kaito on CNCF Slack GitHub Issues | Deploy an AI model on Azure Kubernetes Service (AKS) with the AI toolchain operator add-on | |
| Wassette (releases) | A security-oriented MCP Server that runs agent tools in sandboxes | Azure Alpha | #wassette on Microsoft Open Source Discord GitHub Issues | ||
| Ray (releases) | Scale Python and AI applications from a laptop to a cluster. | #Ray Slack GitHub Issues | Launching Ray Clusters on Azure | ||
| agentgateway (releases) (Website) | Data plane proxy for AI agents and MCP servers, providing routing, security and observability for agentic traffic | Linux Foundation project Pre-1.0 | Discord GitHub issues | ||
| Agent Substrate | A runtime and control plane that multiplexes large numbers of stateful agent sandboxes (microVM/gVisor) onto a smaller pool of Kubernetes workers, with sub-second suspend/resume | No foundation Apache-2.0, pre-1.0 Google-originated; Microsoft contributes | GitHub issues | ||
| VS Code Extensions | |||||
| CNCF Kubernetes Tools | Kubernetes support for VS Code | CNCF Sandbox | GitHub issues | ||
| AKS Tools | Azure Kubernetes Service extension for VS Code | Azure: maintained | GitHub issues | ||
| DALEC Tools | DALEC VS Code extension for secure package building | CNCF/Azure: maintained | GitHub issues | ||
| Containerization Tools | |||||
| Containerization Assist MCP | Model Context Protocol for containerization assistance | Azure: maintained | GitHub issues | ||
| Desktop Applications | |||||
| AKS Desktop | Desktop application for AKS cluster management | Azure: maintained | GitHub issues | ||
| Headlamp (Website) | A Kubernetes web UI with a focus on usability | CNCF: sandbox | #headlamp GitHub issues | ||
| GitHub Actions | |||||
| K8s GitHub Action Toolkit (Documentation) | Umbrella project containing 6 GitHub Actions for Kubernetes workflows | Azure: maintained API: N/A | GitHub issues | ||
| Past Projects | |||||
| AKS Engine (releases) | Self-managed clusters on Azure | Azure: Deprecated. Consider using AKS or Cluster API Azure Provider | |||
| Virtual Kubelet (releases) | Enable services to masquerade as kubelet - serverless | CNCF: sandbox API: N/A | #virtual-kubelet GitHub issues | AKS Virtual Nodes | |
| AAD Pod Identity (releases) | Enables K8s applications to access cloud resources securely with Azure Active Directory | Azure: Archived API: v1 | GitHub issues GitHub Project | Use with AKS | |
| Service Mesh Interface (SMI) Spec | A standard interface for service meshes on Kubernetes | Deprecated; consider using Gateway API | #smi GitHub issues | ||
| Open Service Mesh (OSM) | A lightweight, extensible, cloud native service mesh | Deprecated; consider using Istio | #openservicemesh GitHub issues |
The table above lists projects. The teams pages map the same ground the other way — which contributors work on which project — so you can find the right people for a given repo:
Contributors are identified by GitHub handle. Please reach people through the project channels in the table above rather than direct messages.
Open source project maturity can be assessed on many dimensions including age, number of contributors, diversity of contributor employers, and many more. Two you should consider are represented in the table as:
Interested in joining our team at Microsoft? Please take a look at jobs to see current openings.
904 followers · starred May 2019
652 followers · starred Mar 2020
57 followers · starred Jul 2019
133 followers · starred Jan 2023
This project captures work in progress, and completed work for the Azure Core Container Upstream team
59
90 commits
updated Aug 11, 2026
This list of projects is maintained by the Azure Core Container Upstream team. This list is intended to help you make informed decisions about what projects to use (or not use) in the context of your goals (e.g. proof of concept vs. production). To make this decision you need to consider your goals, your need for formal support, the project's maturity, governance, version level, and your willingness to work in open source.
Projects listed on this page are open source that Microsoft maintain or contribute to. These projects are NOT covered by the Microsoft Azure support policy. To get help please search the open issues on the project using the links in the table. To communicate with the Azure Container Compute Upstream team please use the issues in this repo. If your issue isn't already represented, please open a new one. However, if you consume one of these projects as a part of a Microsoft or Azure product or service, you may be eligible for support through that product or service.
| Project Area | Project & (artifacts) | Goal | Project State & API Version | Communication | Use on Azure |
|---|---|---|---|---|---|
| Kubernetes Cluster Management | |||||
| Cluster API Azure Provider (releases) Tests | Self-managed clusters on Azure using Cluster API | Kubernetes SIGs: stable API: v1beta1 | #cluster-api-azure [email protected] GitHub issues | ||
| Kuberay (releases) Tests | Kubernetes operator that simplifies the deployment and management of Ray applications on Kubernetes | stable API: v1 | #Ray Slack GitHub issues | ||
| Image Builder (releases) Tests | Tools for building Kubernetes disk images | #image-builder [email protected] GitHub issues | |||
| Cluster API Add-on Provider for Helm (releases) Tests | Use Helm charts to manage the installation and lifecycle of Cluster API add-ons. | Kubernetes SIGs: maintenance API: v1beta1 | #cluster-api [email protected] GitHub issues | ||
| Cluster Autoscaler (releases) Tests | Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster. | Kubernetes: stable | #sig-autoscaling [email protected] GitHub issues | ||
| Cluster Autoscaler Provider Azure (releases) Tests | Azure provider for running Cluster Autoscaler on AKS and Azure self-managed clusters. | Kubernetes: stable | #sig-autoscaling [email protected] GitHub issues | ||
| Karpenter (releases) | Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster. | Kubernetes SIGs: stable | #karpenter Karpenter Community GitHub issues | ||
| Kubernetes SIG Scalability (Azure) (DRA) | Kubernetes standard performance and load test effort. | #sig-scalability GitHub issues | |||
| Kubernetes Enhancements | |||||
| Windows containers (kubernetes releases) Tests | Run Windows server containers with Kubernetes | Kubernetes: stable API: N/A | #sig-windows [email protected] Windows Community Forum GitHub issues | ||
| IPv4/v6 Dual-Stack (kubernetes releases) Tests | IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to Pods and Services. | Kubernetes: IPv6: beta Dual-stack: GA | #sig-network [email protected] GitHub issues | ||
| KMSv2 (blog (alpha) blog (beta)) | Encryption at rest of Kubernetes data in etcd using Key Management Service (KMS) v2 API | Kubernetes: GA API: v2 | #sig-auth-kms-dev GitHub issues | ||
| Structured Authentication Configuration (blog (beta)) | Structured authentication configuration in the Kubernetes API server. Initially, only a jwt configuration will be supported, which will serve as the next iteration of the existing OIDC authenticator. | Kubernetes: GA API: v1 | #sig-auth-authenticators-dev GitHub issues | ||
| Structured Authorization Configuration (blog (beta)) | Structured authorization configuration in the Kubernetes API serverintroducing a more structured and versatile way to configure the authorization chain, focusing on enabling multiple webhooks and providing explicit control mechanisms. | Kubernetes: GA API: v1 | #sig-auth-authorizers-dev GitHub issues | ||
| Move Storage Version Migrator in-tree | Move storage version migrator in-tree to make it easy for users to perform storage migrations. | Kubernetes: alpha API: v1alpha1 | #sig-api-machinery-storageversion-dev GitHub issues | ||
| DRA: ResourceSlice Status for Device Health Tracking | Enable DRA drivers to store device health and other device status in the ResourceSlice | Kubernetes: proposed | #wg-device-management GitHub issues | ||
| Extended Toleration Operators for Threshold-Based Placement | Add numeric comparison operators (Lt, Gt) to Tolerations for SLA-based scheduling with threshold-based taint matching. | Kubernetes: proposed | #sig-scheduling GitHub issues | ||
| ServiceAccount tokens for Image Pulls (blog (alpha)) | Enables kubelet credential providers to use pod-specific service account tokens for registry authentication, eliminating long-lived image pull secrets. | Kubernetes: beta API: N/A | #sig-auth-authenticators-dev GitHub issues | ||
| Ensure Image Pull Credential Verification (blog (alpha)) | It provides authorization to container image pulls for images already present on the node when these are requested with the IfNotPresent or Never image pull policy in a Pod. | Kubernetes: alpha API: v1alpha1 | #sig-auth-authenticators-dev GitHub issues | ||
| DRA: AdminAccess for ResourceClaims and ResourceClaimTemplates (blog (alpha)) | Enables privileged access to devices already in use by other users for administrative tasks like health monitoring, restricted to authorized namespaces. | Kubernetes: beta API: N/A | #wg-device-management GitHub issues | ||
| Cluster Trust Bundles | Cluster Trust Bundles make it easy to publish X.509 trust anchors and then consume them in cluster workloads. | Kubernetes: beta API: v1beta1 | #sig-auth-certificates-dev GitHub issues | ||
| Cloud Native Governance and Security | |||||
| OPA Gatekeeper (releases) | K8s native Open Policy Agent policy enforcement | Azure: GA (AKS and Arc) CNCF: graduated API: Config: v1alpha1; ConstraintTemplate: v1; Constraints: v1beta1; Mutation: v1; External Data: v1beta1 | #kubernetes-policy GitHub issues | ||
| Secrets Store CSI Driver (releases) Builds | Integrates secrets stores with Kubernetes via a Container Storage Interface (CSI) volume | Kubernetes: GA API: v1 | #csi-secrets-store GitHub issues | ||
| Azure KeyVault Provider for Secrets Store CSI Driver (releases) | Enables mounting AKV secrets as volumes in K8s pods | Azure: GA (AKS and Arc) API: N/A | GitHub issues | Use with AKS | |
| KMS Plugin for Key Vault (releases) | Enables encryption at rest of Kubernetes data in etcd using Azure Key Vault | Azure: GA (AKS) API: N/A | GitHub issues | Use with AKS | |
| Azure Workload Identity (releases) | Uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods based on Workload Identity federation | Azure: GA (AKS) API: N/A | GitHub issues | How to use (OSS) How to use (AKS) | |
| Eraser (releases) | Cleaning up images from Kubernetes nodes | CNCF: sandbox Azure: GA (AKS) API: v1 | #eraser GitHub issues | How to use (OSS) How to use (AKS) | |
| Copacetic (releases) | CLI tool for directly patching container images using reports from vulnerability scanners | CNCF: sandbox | #copa GitHub issues | How to use | |
| DALEC (releases) | Produce secure packages and containers with declarative configurations | Azure: incubating | GitHub issues | How to use | |
| Notation (releases) (Website) | A CLI tool to sign and verify OCI artifacts, from the Notary Project | CNCF: incubating | #notary-project in CNCF Slack GitHub issues | Sign container images with Notation in ACR | |
| Cloud Native Service Mesh | |||||
| Istio | The leading service mesh on Kubernetes | CNCF: graduated APIs: experimental, alpha, beta, stable | Istio Slack GitHub issues | Deploy Istio addon on AKS | |
| Gateway API | A sig-network subproject that establishes a specification for service networking in Kubernetes (ingress and service mesh) | Kubernetes: v1beta APIs: Standard and Experimental | #gateway-api in Kubernetes Slack GitHub issues | Use application gateway for containers | |
| Envoy Proxy | A high performance, cloud-native proxy | CNCF: graduated | Envoy Slack GitHub issues | ||
| Observability | |||||
| Inspektor Gadget (releases) (Website) | A set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF | CNCF: sandbox (since March 2023) | #inspektor-gadget in Kubernetes Slack GitHub issues | ||
| Container Runtime | |||||
| Moby (releases) | Toolkit for app containerization | #opencontainers Moby Forums GitHub issues | |||
| Containerd (releases) | Complete container lifecycle management on Linux and Windows hosts | CNCF: graduated API: N/A | #opencontainers [email protected] GitHub issues | ||
| Containerd runwasi (releases) | Facilitates running Wasm / WASI workloads managed by containerd | CNCF: alpha | #runwasi GitHub issues | ||
| Containerd Wasm Shims (releases) | containerd shims for running WebAssembly workloads in Kubernetes | DeisLabs: alpha | #GitHub Issues | ||
| Platforms | |||||
| Brigade | Event-driven scripting for Kubernetes | CNCF: Archived API: v2 | #brigade channel on Kubernetes Slack GitHub Issues | ||
| Deployment Tools | |||||
| Porter | Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command | CNCF: Sandbox Stable: v0.38.x Prerelease: v1.0.0-alpha | Mailing list, slack, etc Project Board | Azure Service Operator, Azure Trusted Research Environments | |
| CNAB Specification | Cloud Native Application Bundle Specification implemented by Porter | Spec: 1.1 | #cnab on CNCF Slack Issues | ||
| Web Assembly / WASI | |||||
| Hyperlight-Wasm | hyperlight-wasm is a rust library crate that enables Wasm Modules and components to be run inside lightweight Virtual Machine backed Sandbox. It is built on top of Hyperlight. | CNCF Sandbox | GitHub Issues | ||
| Virtualization | |||||
| Hyperlight | Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead. | CNCF Sandbox | #Hyperlight GitHub Issues | ||
| AI | |||||
| Kubernetes AI Toolchain Operator (KAITO) (releases) | Kubernetes operator that automates the AI/ML model inference or tuning workload in a Kubernetes cluster. | CNCF Sandbox | #kaito on CNCF Slack GitHub Issues | Deploy an AI model on Azure Kubernetes Service (AKS) with the AI toolchain operator add-on | |
| Wassette (releases) | A security-oriented MCP Server that runs agent tools in sandboxes | Azure Alpha | #wassette on Microsoft Open Source Discord GitHub Issues | ||
| Ray (releases) | Scale Python and AI applications from a laptop to a cluster. | #Ray Slack GitHub Issues | Launching Ray Clusters on Azure | ||
| agentgateway (releases) (Website) | Data plane proxy for AI agents and MCP servers, providing routing, security and observability for agentic traffic | Linux Foundation project Pre-1.0 | Discord GitHub issues | ||
| Agent Substrate | A runtime and control plane that multiplexes large numbers of stateful agent sandboxes (microVM/gVisor) onto a smaller pool of Kubernetes workers, with sub-second suspend/resume | No foundation Apache-2.0, pre-1.0 Google-originated; Microsoft contributes | GitHub issues | ||
| VS Code Extensions | |||||
| CNCF Kubernetes Tools | Kubernetes support for VS Code | CNCF Sandbox | GitHub issues | ||
| AKS Tools | Azure Kubernetes Service extension for VS Code | Azure: maintained | GitHub issues | ||
| DALEC Tools | DALEC VS Code extension for secure package building | CNCF/Azure: maintained | GitHub issues | ||
| Containerization Tools | |||||
| Containerization Assist MCP | Model Context Protocol for containerization assistance | Azure: maintained | GitHub issues | ||
| Desktop Applications | |||||
| AKS Desktop | Desktop application for AKS cluster management | Azure: maintained | GitHub issues | ||
| Headlamp (Website) | A Kubernetes web UI with a focus on usability | CNCF: sandbox | #headlamp GitHub issues | ||
| GitHub Actions | |||||
| K8s GitHub Action Toolkit (Documentation) | Umbrella project containing 6 GitHub Actions for Kubernetes workflows | Azure: maintained API: N/A | GitHub issues | ||
| Past Projects | |||||
| AKS Engine (releases) | Self-managed clusters on Azure | Azure: Deprecated. Consider using AKS or Cluster API Azure Provider | |||
| Virtual Kubelet (releases) | Enable services to masquerade as kubelet - serverless | CNCF: sandbox API: N/A | #virtual-kubelet GitHub issues | AKS Virtual Nodes | |
| AAD Pod Identity (releases) | Enables K8s applications to access cloud resources securely with Azure Active Directory | Azure: Archived API: v1 | GitHub issues GitHub Project | Use with AKS | |
| Service Mesh Interface (SMI) Spec | A standard interface for service meshes on Kubernetes | Deprecated; consider using Gateway API | #smi GitHub issues | ||
| Open Service Mesh (OSM) | A lightweight, extensible, cloud native service mesh | Deprecated; consider using Istio | #openservicemesh GitHub issues |
The table above lists projects. The teams pages map the same ground the other way — which contributors work on which project — so you can find the right people for a given repo:
Contributors are identified by GitHub handle. Please reach people through the project channels in the table above rather than direct messages.
Open source project maturity can be assessed on many dimensions including age, number of contributors, diversity of contributor employers, and many more. Two you should consider are represented in the table as:
Interested in joining our team at Microsoft? Please take a look at jobs to see current openings.
904 followers · starred May 2019
652 followers · starred Mar 2020
57 followers · starred Jul 2019
133 followers · starred Jan 2023
