A5EA Kubernetes-native Ansible Semaphore alternative

Hosts, inventories, playbooks, SSH keys, scheduled jobs, and playbook runs — all modeled as Kubernetes Custom Resources, reconciled by an operator, and managed from a Vue-based UI.

Get started

View on GitHub

🧩

Everything is a Custom Resource

AnsibleHost, AnsibleInventory, AnsiblePlaybook, AnsibleSSHKey, AnsibleRun, and AnsibleJob — no database, just Kubernetes objects reconciled by an operator.

🔐

Real Kubernetes RBAC

The API impersonates the logged-in user for every call, so authorization is your cluster's actual RBAC, not app-level permission bits.

🌐

OIDC or local accounts

🧱

Namespaced or cluster-scoped

Every resource kind mirrors cert-manager's Issuer/ClusterIssuer pattern — namespaced for per-team resources, cluster-scoped for shared ones.

📦

One Helm chart

Deploy the operator, API, UI, and CRDs together, with cert-manager and ingress-allowlist support built in.

📜

Apache 2.0

Fully open source, including the operator's reconcile logic and the API's authorization model.