It is a specialized toolset to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management in the Kubernetes ecosystem.

It enables pod networking and enforces network Kubernetes policies.

It is responsible for scanning language-specific packages in container images, such as Java, Python,
Go, and others.

It is a native Kubernetes certificate management controller that adds certificates and certificate issuers as resource types in Kubernetes clusters.