{"id":13550753,"url":"https://github.com/kubermatic/kubeone","last_synced_at":"2026-10-19T12:41:12.341Z","repository":{"id":37405784,"uuid":"155974736","full_name":"kubermatic/kubeone","owner":"kubermatic","description":"Kubermatic KubeOne automate cluster operations on all your cloud, on-prem, edge, and IoT environments.  ","archived":false,"fork":false,"pushed_at":"2026-10-09T15:03:03.000Z","size":17168,"stargazers_count":1526,"open_issues_count":99,"forks_count":254,"subscribers_count":29,"default_branch":"main","last_synced_at":"2026-10-11T13:56:33.284Z","etag":null,"topics":["cluster-api","kubernetes"],"latest_commit_sha":null,"homepage":"https://kubeone.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kubermatic.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"code-of-conduct.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":"DCO","cla":null,"disclosure":null}},"created_at":"2018-11-03T10:59:33.000Z","updated_at":"2026-10-09T19:59:56.000Z","dependencies_parsed_at":"2023-12-21T09:54:21.403Z","dependency_job_id":"3d7db61c-c508-4a85-8d13-5a894099c3a5","html_url":"https://github.com/kubermatic/kubeone","commit_stats":{"total_commits":1720,"total_committers":91,"mean_commits":18.9010989010989,"dds":0.5313953488372093,"last_synced_commit":"0ae1753af79abd3415f08bf907fe18f58c701ecb"},"previous_names":[],"tags_count":161,"template":false,"template_full_name":null,"purl":"pkg:github/kubermatic/kubeone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubermatic%2Fkubeone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubermatic%2Fkubeone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubermatic%2Fkubeone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubermatic%2Fkubeone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kubermatic","download_url":"https://codeload.github.com/kubermatic/kubeone/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kubermatic%2Fkubeone/sbom","scorecard":{"id":572566,"data":{"date":"2025-08-11","repo":{"name":"github.com/kubermatic/kubeone","commit":"e2fe2459243f424195357d56d0ca1e14892634e1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: Dockerfile:15","Warn: containerImage not pinned by hash: Dockerfile:27: pin your Docker image by updating docker.io/alpine:3.19 to docker.io/alpine:3.19@sha256:3be987e6cde1d07e873c012bf6cfe941e6e85d16ca5fc5b8bedc675451d2de67","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.11.1 not signed: https://api.github.com/repos/kubermatic/kubeone/releases/234892523","Warn: release artifact v1.10.3 not signed: https://api.github.com/repos/kubermatic/kubeone/releases/234885517","Warn: release artifact v1.10.2 not signed: https://api.github.com/repos/kubermatic/kubeone/releases/233909042","Warn: release artifact v1.11.0 not signed: https://api.github.com/repos/kubermatic/kubeone/releases/231480404","Warn: release artifact v1.10.1 not signed: https://api.github.com/repos/kubermatic/kubeone/releases/225113555","Warn: release artifact v1.11.1 does not have provenance: https://api.github.com/repos/kubermatic/kubeone/releases/234892523","Warn: release artifact v1.10.3 does not have provenance: https://api.github.com/repos/kubermatic/kubeone/releases/234885517","Warn: release artifact v1.10.2 does not have provenance: https://api.github.com/repos/kubermatic/kubeone/releases/233909042","Warn: release artifact v1.11.0 does not have provenance: https://api.github.com/repos/kubermatic/kubeone/releases/231480404","Warn: release artifact v1.10.1 does not have provenance: https://api.github.com/repos/kubermatic/kubeone/releases/225113555"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2022-0635","Warn: Project is vulnerable to: GO-2022-0646"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-20T16:44:25.922Z","repository_id":37405784,"created_at":"2025-08-20T16:44:25.922Z","updated_at":"2025-08-20T16:44:25.922Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38356471,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cluster-api","kubernetes"],"created_at":"2024-08-01T12:01:37.152Z","updated_at":"2026-10-19T12:41:11.896Z","avatar_url":"https://github.com/kubermatic.png","language":"Go","funding_links":[],"categories":["Go","kubernetes","Kubernetes Operations","Cluster","Tools"],"sub_categories":["Streaming Operations","Rust"],"readme":"# Kubermatic KubeOne\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"docs/img/kubeone-logo-text.png#gh-light-mode-only\" width=\"700px\" /\u003e\n  \u003cimg src=\"docs/img/kubeone-logo-text-dark.png#gh-dark-mode-only\" width=\"700px\" /\u003e\n\u003c/p\u003e\n\n[![KubeOne Report Card](https://goreportcard.com/badge/github.com/kubermatic/kubeone)](https://goreportcard.com/report/github.com/kubermatic/kubeone)\n\nKubermatic KubeOne automates cluster operations on all your cloud, on-prem,\nedge, and IoT environments. KubeOne can install high-available (HA) master\nclusters as well single master clusters.\n\n## Getting Started\n\nAll user documentation for the latest stable version is available at the\n[KubeOne docs website][docs].\n\nInformation about the support policy (natively-supported providers, supported\nKubernetes versions, and supported operating systems) can be found in the\n[Compatibility document][docs-compatibility].\n\nFor a quick start, you should check the following documents:\n\n* [Architecture][docs-concepts] to get familiar with the concepts of KubeOne.\n* [Getting KubeOne][docs-getting-kubeone] to download and install KubeOne locally.\n* [Provisioning][docs-provisioning] to provision the Kubernetes cluster.\n\n\n## Quick Start\nThe fastest way to deploy a KubeOne kubernetes cluster is to use the installation script:\n\n```bash\ncurl -sfL get.kubeone.io | sh\nkubeone local\n# Wait \nexport KUBECONFIG=local-kubeconfig\nkubectl get pod -A\n```\n\nCheck out, \n[All-in-one Cluster][docs-kubeone-local].\n\n\n## Installing KubeOne\n\nYou can also customize the installation:\n\n```bash\ncurl -sfL get.kubeone.io | sh\n```\n\nThe installation script downloads the release archive from GitHub, installs the\nKubeOne binary in your `/usr/local/bin` directory, and unpacks the example\nTerraform configs, addons, and helper scripts in your current working\ndirectory.\n\nFor other installation methods, check the\n[Getting KubeOne guide][docs-getting-kubeone] on our documentation website.\n\n## Features\n\n### Easily Deploy Your Highly Available Cluster On Any Infrastructure\n\nKubeOne works on any infrastructure out of the box. All you need to do is to\nprovision the infrastructure and let KubeOne know about it. KubeOne will take\ncare of setting up a production ready Highly Available cluster!\n\n### Native Support For The Most Popular Providers\n\nKubeOne natively supports the most popular providers, including AWS, Azure,\nDigitalOcean, GCP, Hetzner Cloud, Nutanix, OpenStack, VMware Cloud Director, and VMware vSphere.\nThe natively supported providers enjoy additional features such as integration\nwith Terraform and Kubermatic machine-controller.\n\n### Kubernetes Conformance Certified\n\nKubeOne is a Kubernetes Conformance Certified installer with support for\nall [upstream-supported][upstream-supported-versions] Kubernetes versions.\n\n### Declarative Cluster Definition\n\nDefine all your clusters declaratively, in a form of a YAML manifest.\nYou describe what features you want and KubeOne takes care of setting them up.\n\n### Integration With Terraform\n\nThe built-in integration with Terraform, allows you to easily provision your\ninfrastructure using Terraform and let KubeOne take all the needed information\nfrom the Terraform state.\n\n### Integration With Cluster-API, Kubermatic machine-controller, and operating-system-manager\n\nManage your worker nodes declaratively by utilizing the [Cluster-API][cluster-api]\nand [Kubermatic machine-controller][machine-controller]. Create, remove,\nupgrade, or scale your worker nodes using kubectl.\n[Kubermatic operating-system-manager][operating-system-manager] is responsibile for\nmanaging user-data for worker machines in the cluster.\n\n## Getting Involved\n\nWe very appreciate contributions! If you want to contribute or have an idea for\na new feature or improvement, please check out our\n[contributing guide][contributing-guide].\n\nIf you want to get in touch with us and discuss about improvements and new\nfeatures, please create a new issue on GitHub or connect with us over Slack:\n\n* [`#kubeone` channel][k8s-slack-kubeone] on [Kubernetes Slack][k8s-slack]\n\n## Reporting Bugs\n\nIf you encounter issues, please [create a new issue on GitHub][github-issue] or\ntalk to us on the [`#kubeone` Slack channel][k8s-slack-kubeone]. When reporting\na bug please include the following information:\n\n* KubeOne version or Git commit that you're running (`kubeone version`),\n* description of the bug and logs from the relevant `kubeone` command (if\n  applicable),\n* steps to reproduce the issue,\n* expected behavior\n\nIf you're reporting a security vulnerability, please follow\n[the process for reporting security issues][security-vulnerability].\n\n## Changelog\n\nSee [the list of releases][changelog] to find out about feature changes.\n\n[upstream-supported-versions]: https://kubernetes.io/docs/setup/release/version-skew-policy/#supported-versions\n[cluster-api]: https://github.com/kubernetes-sigs/cluster-api\n[machine-controller]: https://github.com/kubermatic/machine-controller\n[operating-system-manager]: https://github.com/kubermatic/operating-system-manager\n[docs]: https://docs.kubermatic.com/kubeone/\n[docs-architecture]: https://docs.kubermatic.com/kubeone/main/architecture/\n[docs-concepts]: https://docs.kubermatic.com/kubeone/main/architecture/concepts/\n[docs-compatibility]: https://docs.kubermatic.com/kubeone/main/architecture/compatibility/\n[docs-getting-kubeone]: https://docs.kubermatic.com/kubeone/main/getting-kubeone/\n[docs-kubeone-local]: https://docs.kubermatic.com/kubeone/main/guides/local/\n[docs-provisioning]: https://docs.kubermatic.com/kubeone/main/tutorials/creating-clusters/\n[contributing-guide]: https://github.com/kubermatic/kubeone/blob/main/CONTRIBUTING.md\n[k8s-slack-kubeone]: https://kubernetes.slack.com/messages/CNEV2UMT7\n[k8s-slack]: http://slack.k8s.io/\n[github-issue]: https://github.com/kubermatic/kubeone/issues\n[security-vulnerability]: https://github.com/kubermatic/kubeone/blob/main/CONTRIBUTING.md#reporting-a-security-vulnerability\n[changelog]: https://github.com/kubermatic/kubeone/releases\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkubermatic%2Fkubeone","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkubermatic%2Fkubeone","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkubermatic%2Fkubeone/lists"}