UDS Core establishes a secure baseline for cloud-native systems with compliance documentation and first-class support for airgap/egress-limited environments. It combines several applications into a single Zarf package, deployed using UDS CLI.
Key capabilities include the UDS Operator for automated networking, SSO, and monitoring configuration, and the UDS Policy Engine for security enforcement.
Tip
For full documentation including architecture, configuration, and how-to guides, visit the UDS Core docs.
| Application | Role |
|---|---|
| Istio | Service Mesh |
| Keycloak | Identity & Access Management |
| Authservice | Authorization |
| Pepr | UDS Policy Engine & Operator |
| Prometheus Stack | Monitoring |
| Grafana | Dashboards & Visualization |
| Blackbox Exporter | Endpoint Probing |
| Metrics Server | Cluster Metrics |
| Loki | Log Aggregation |
| Vector | Log Collection & Routing |
| Falco | Runtime Security |
| Velero | Backup & Restore |
Run a local demo with K3d:
uds deploy k3d-core-demo:latestSee the Local Demo guide for full setup instructions.
For production deployments on any CNCF-conformant Kubernetes cluster, see the Production Deployment guide.
For developing UDS Core itself or building UDS Packages, see the Contributing Guide and dev bundles documentation.