Otomi is an open-source, cloud-agnostic and Kubernetes-based platform to securely deploy, run and manage applications with a desktop-like user interface.
Otomi is easy to install, comes with an intuitive desktop-like UI and ready to use pre-configured built-in applications to offer an out-of-the-box experience. Just like you would expect from your favorite Linux distribution. After installing Otomi on Kubernetes, you can sign in and immediately start deploying your apps. Read more about Otomi at otomi.io.
Otomi is built on top of the following open-source projects:
- Istio
- Knative Serving
- Nginx Ingress
- Prometheus Operator
- Grafana Loki
- HashiCorp Vault
- Gatekeeper
- Keycloak
- Gitea
- Drone
- Harbor
- Cert manager
- External DNS
- And more
Otomi offers:
- Developer self-service: Members of a team can directly access all the tools they need and create Services, Jobs and Secrets using Otomi Console
- Pre-configured and ready-to-use applications
- Application configuration management for all integrated applications, providing a base profile configuration to support the most common DevOps use-cases
- Multi-tenancy: Create Teams and provide SSO access to shared applications
- Implemented policies for better governance and security. Manifests are checked both statically and on the cluster at runtime for policy obedience
- Single Sign On: Bring your own IDP or use Keycloak as IDP (default)
- Automatic ingress configuration: Easily configure ingress for Team services, allowing public access to services within minutes. Istio gateways and virtual services are automatically generated and configured for Team services, tying a generic ingress architecture to service endpoints in a predictable way
- Input/output validation: Configuration and output manifests are checked statically for validity and best practices
- Automatic vulnerability scanning: Scan all configured Team service containers in Harbor
- Built-in support for Azure, Amazon Web Services and Google Cloud Platform
- And much more..
Check this video for a first impression of Otomi.
Otomi aims to support the most common DevSecOps use-cases out-of-the-box and strongly relies on GitOps patterns, where desired state is reflected as code and the cluster state is automatically updated. Learn more about Otomi at otomi.io.
See otomi.io for detailed instructions on how to install and use Otomi.
Otomi consists out of multiple projects:
- Otomi Core (this project): The heart of Otomi
- Otomi Tasks: Autonomous jobs orchestrated by Otomi Core
- Otomi API: The brain of Otomi, handling console input and talking to Otomi Core
- Otomi Console: The UI of Otomi for admins and teams, talking to Otomi API
- Otomi Clients: Factory to build and publish openapi clients used in the redkubes/otomi-tasks repo
If you wish to contribute please read our Contributor Code of Conduct and Contribution Guidelines.