nowfound

Dev tools · September 13, 2022

Constellation – An always encrypted Kubernetes engine

Hey HN, my colleagues and I have been working on Constellation for 1.5+ years. We open sourced it today under AGPLv3. It's a standalone Kubernetes engine/distribution that operations-wise is very much vanilla K8s (v1.24). Security-wise, it comes with some new concepts: It's designed to shield K8s clusters as a whole from the cloud. The goal is that not even the cloud provider and its employees can access any data in a cluster. Constellation basically ensures that all nodes in a cluster (1) run inside verified "Confidential VMs" and (2) encrypt all network traffic and storage.…

Constellation – An always encrypted Kubernetes engine launched on September 13, 2022 with 14 votes, #985 of 3,464 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.

In plain words

Constellation is a Kubernetes distribution designed to protect entire clusters from cloud provider access. It runs on confidential virtual machines with encrypted memory and encrypts all network traffic and storage, ensuring data remains private even from cloud infrastructure administrators. The platform operates as standard Kubernetes operationally while adding security layers through hardware-based isolation and encryption. It is intended for organizations requiring strong data privacy guarantees in cloud environments.

written from the facts on this page · September 2026

From the sources

Constellation is a Kubernetes distribution for confidential computing, securing entire clusters on untrusted infrastructure. Constellation is in maintenance mode. New development continues in Contrast, which provides workload-level confidential computing using Confidential Containers. 👉 https://github.com/edgelesssys/contrast - edgelesssys/constellation

In the maker’s words, at launch

Hey HN, my colleagues and I have been working on Constellation for 1.5+ years. We open sourced it today under AGPLv3. It's a standalone Kubernetes engine/distribution that operations-wise is very much vanilla K8s (v1.24). Security-wise, it comes with some new concepts: It's designed to shield K8s clusters as a…

Does a similar job

all alternatives →
  • Constellation2022 · github.com · ▲74

    The first always-encrypted Kubernetes

  • Devtron2023 · devtron.ai · ▲174

    Kubernetes adoption at warp speed

  • AO
    An online interactive Kubernetes playground2017 · play-with-k8s.com · ▲164
  • Moon2019 · ▲65

    A cross-browser testing platform for your Kubernetes cluster

  • OuterSpace Operator2023 · operator.outerspace.sh · ▲80

    Operate your algorithms on Kubernetes with ease

  • Kubescape2022 · github.com · ▲65

    Kubernetes security made for developers

More dev tools this month

the category →
  • Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

    Dev tools · 6d ago · github.com

  • /dev/null▲503

    a social network for devs

    Dev tools · 9d ago · dev-null.sh

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 29d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 26d ago · talanoa.email

  • myPip▲273

    Vibe code, publish, and monetize games with AI

    Dev tools · 12d ago · mypip.dev

  • Doneas▲273

    A daily accountability call with other entrepreneurs.

    Dev tools · 19d ago · doneas.com

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, September 2022

the whole month →
  • IM

    Life & fun · 2022 · dogbunnypuzzle.com

  • A couple of years ago, I had an interesting idea. What if there was a marketplace where all the underlying tech was open-source? The order management system, the storefront, customer support, etc. The marketplace would simply connect to the seller’s infra instead of locking them in. If, for some reason, the seller is removed from the marketplace, their software stays with them and they can continue accepting orders directly. This model can be used to disrupt any marketplace from AirBNB to UberEats: building tech for home renters and restaurants and later, leveraging that to build a competing…

    Dev tools · 2022 · openship.org

  • Polywork▲1,214

    Discover opportunities to collaborate

    Life & fun · 2022

  • xTiles▲1,036

    Organize your ideas & projects visually

    Work · 2022 · xtiles.app

  • Arcade 2.0▲1,026

    The easiest way to showcase your product

    Life & fun · 2022 · arcade.software

  • Maven▲978

    100+ live courses taught by experts, education reimagined

    Life & fun · 2022 · maven.com