The erldns repository is an Erlang/OTP-based authoritative DNS server that processes DNS queries through a modular pipeline architecture. It loads zone data from JSON or standard zone files, provides DNSSEC validation and signing, and includes features like query throttling, EDNS0 processing, and an HTTP-based Admin API for runtime zone management and monitoring. The system is built using OTP supervision trees, with separate supervisors for listeners, pipeline workers, and zone loading. Key architectural strengths include a reusable pipeline pattern for extensible query processing, a worker pool for asynchronous operations, a segmented cache abstraction for high-concurrency scenarios, and admission control mechanisms using CoDel and Cubic algorithms. The Admin API follows a middleware pattern allowing custom extensions, and the zone loading subsystem supports pluggable codecs for custom record types. The codebase demonstrates strong engineering practices with comprehensive testing, dependency management, and observability via telemetry.
This repository is a comprehensive library of Kyverno policies for Kubernetes, providing a curated collection of Validating, Mutating, Generating, and Cleanup policies. It covers Pod Security Standards (baseline and restricted), best practices, RBAC restrictions, image registry controls, and integrations with ecosystem tools like Istio, Linkerd, Karpenter, and ArgoCD. The policies are written as YAML manifests using Kyverno's CEL-based API (policies.kyverno.io/v1) and are accompanied by extensive test suites using both Chainsaw and Kyverno CLI frameworks. The repository serves as a reference implementation and distribution channel for Kyverno users, with standardized metadata (ArtifactHub), CI/CD pipelines, and contribution guidelines. While not a traditional application, it functions as a policy-as-code library with a strong emphasis on security and operational best practices.