Kubernetes-Based Platform as a Service
Effortlessly deploy, scale, and manage applications on Kubernetes
Unbind is a Platform as a Service (PaaS) for managing all kinds of applications, it provides:
- Zero-configuration deployments from Git repositories and Docker images
- Intelligent build system powered by BuildKit and Railpack
- Security integrating OAuth2/OIDC with native Kubernetes RBAC
- Metrics with Victoria k8s stack or Prometheus kube stack
- Templates an extensible template system that supports zero-configuration deployments of many popular open-source products (plausible, supabase, wordpress, minio, and more.)
- Production-grade Databases with Backups with support for many popular databases through operators and helm charts - with backups to any S3-compatible storage.
graph TB
subgraph "User Interface"
UI[Unbind UI<br/>NextJS]
end
subgraph "Authentication Layer"
Dex[Dex OIDC Provider]
OIDC[Unbind OIDC Server]
Dex -.-> OIDC
end
subgraph "API Layer"
API[Unbind API<br/>Go + Huma]
end
subgraph "Data Storage"
DB[(PostgreSQL<br/>All Unbind Data)]
Redis[(Redis<br/>Cache & Build Queue)]
end
subgraph "Build System"
BuildJob[Kubernetes Job<br/>unbind-builder]
BuildKit[BuildKit<br/>Build + Push]
Registry[Container Registry]
BuildJob --> BuildKit
BuildKit --> Registry
end
subgraph "Kubernetes Infrastructure"
K8s[Kubernetes API]
Operator[Unbind Operator<br/>Watches CRDs]
CRD[Custom Resource<br/>Instances]
NativeRes[Native K8s Resources<br/>StatefulSets, Services, etc.]
Operator -->|"Reconciles"| CRD
Operator -->|"Creates/Updates"| NativeRes
end
%% Authentication Flow
UI -->|"Auth Request"| Dex
UI -->|"API Calls with Token"| API
API -->|"Token Verification"| Dex
%% Data Flow
API --> DB
API --> Redis
%% Build Flow
API -->|"Trigger Build"| BuildJob
API -->|"Queue Management"| Redis
BuildJob -->|"Deploy CRD Instance"| CRD
BuildKit -->|"Push Image"| Registry
%% Platform Operations
API -->|"Direct K8s Operations"| K8s
| Component | Purpose | Technology |
|---|---|---|
| API Server | Core platform logic & REST APIs | Go + Huma Framework |
| OAuth2 Server | Authentication & authorization | Dex + OIDC |
| Builder Service | Container image building | BuildKit + Railpack |
- Go 1.24+
- Docker & Docker Compose
- Kubernetes cluster (local or cloud)
- Dex IDP binary in
$PATH
# 1) Clone the repository git clone https://github.com/unbindapp/unbind-api.git cd unbind-api # 2) Start infrastructure dependencies docker-compose up -d # 3) Start Dex Identity Provider ./startdex.sh # 4) Configure environment variables cp .env.example .env # Edit .env with your settings (see config/config.go for reference) # 5) Run database migrations go run cmd/cli migrate # 6) Start the services go run cmd/api # API Server (port 8089) go run cmd/oauth2server # OAuth2 Server (port 8090)
Visit http://localhost:8089/docs for interactive API documentation (OpenAPI 3.1)
| Technology | Purpose | Why We Use It |
|---|---|---|
| Huma v2 | REST API Framework | Type-safe APIs with automatic OpenAPI generation |
| Ent | Entity Framework | ORM that models database entities as GO objects |
| go-redis | Redis Client | Build queues and caching |
| BuildKit | Container Builder | Advanced build features and distributed caching |
| Railpack | Application Builder | Automatically turns code into images |
- Cert-Manager for TLS certificate automation with Let's Encrypt
- Ingress NGINX Controller for reverse proxy and load balancer
- Prometheus for metrics collection
- Loki for centralized logging
- Alloy for ingesting pod logs into Loki
Unbind uses extensive code generation for maintainable, type-safe code:
# Regenerate Ent entities and edges make ent # Regenerate service interfaces and mocks make interfaces
Update entities in ./ent/schema, then create a new versioned migration.
# Create a new migration make migrate NAME=add_awesome_feature # If editing the migration manually, then re-generate checksum make migrate:checksum
Migrations are applied automatically on API startup.
# Create superuser account go run cmd/cli user:create \ [email protected] \ --password=secure_password # Create superuser group go run cmd/cli group:create \ --name=superuser \ --description="Platform Administrators" # Add user to superuser group go run cmd/cli group:add-user \ [email protected] \ --group-name=superuser # Grant system-wide admin permissions go run cmd/cli group:grant-permission \ --group-name=superuser \ --resource-type=system \ --resource-id="*" \ --action=admin # Sync permissions to Kubernetes go run cmd/cli sync:group-to-k8s
We welcome contributions! Here's how to get started:
- Fork the repository
- Create a feature branch:
git checkout -b amazing-feature - Make your changes and add tests
- Run tests:
go test ./... - Commit changes:
git commit -m 'Add amazing feature' - Push to branch:
git push origin amazing-feature - Create a Pull Request
This project is licensed under the MIT License - see the LICENSE file for details.