Connect, secure, control, and observe services.
- microservices
- service-mesh
- lyft-envoy
- kubernetes
47,133 repositories indexed
1–24 of 26 · Most stars
Connect, secure, control, and observe services.
Polly is a .NET resilience and transient-fault-handling library that allows developers to express policies such as Retry, Circuit Breaker, Timeout, Bulkhead Isolation, and Fallback in a fluent and thread-safe manner. From version 6.0.1, Polly targets .NET Standard 1.1 and 2.0+.
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Open-source Infrastructure as Code (IaC) orchestration platform: GitOps workflows, orchestration, code generation, observability, drift detection, asset management, policies, Slack notifications, and more. Integrates with Terraform, OpenTofu, Terragrunt, Kubernetes, GitHub Actions, GitLab CI/CD, BitBucket Pipelines, and any other CI/CD platform.
An in-memory cache library for golang. It supports multiple eviction policies: LRU, LFU, ARC
GitHub App to set and enforce security policies
Built-in Panther detection rules and policies
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are built on Supabase Auth and PostgreSQL.
A custom TextField with a switchable icon which shows or hides the password and enforce good password policies
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
Manage AWS organizations, organizational units (OU), accounts and service control policies (SCP).
Official code for "Reinforcement Fine-Tuning of Flow-Matching Policies for Vision-Language-Action Models" (ICRA 2026): Flow Policy Optimization for pi0
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
stacked authentication policies for pyramid
A Kustomize generator plugin to generate Open Cluster Management policies
This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies
This CDK Construct helps create IAM Managed Policies and IAM Roles using JSON Configuration
Static analysis from configs → Kubernetes NetworkPolicies in seconds
The Generic version of `gcache`. It supports multiple eviction policies: LRU, LFU, ARC.
A Common Lisp library for sanitizing HTML using OWASP-style policies
Use multiple authentication policies with Pyramid.