k8s-aibom
Know what AI is actually running in your clusters. k8s-aibom is an unprivileged Kubernetes controller that inventories models, runtimes, agents and RAG components at runtime and writes one CycloneDX 1.6 ML-BOM per workload, with evidence and a confidence tier on every attribute.
- Source, install and quickstart: github.com/GoogleCloudPlatform/k8s-aibom
- Releases: github.com/GoogleCloudPlatform/k8s-aibom/releases
- Overview deck: deck/
Using it
- Install on EKS, AKS and other conformant clusters
- Building from source
- Compatibility
- Migration to v1beta1
- Incident response with
kubectl aibom - Policy cookbook (Kyverno, Gatekeeper)
- Dependency-Track integration
- Webhook sink protocol
How it decides
- Scraper heuristics
- Contributing a detection pattern
- CycloneDX property taxonomy
- Schema divergences
- External CRD versions
Trust
- Security model
- Threat model
- Quality baseline
- Evidence notes from real-cluster validation and downstream requalification