From 1ba8ea1240d1b88fa806a43dde9b71f921a6651b Mon Sep 17 00:00:00 2001 From: tym83 <6355522@gmail.com> Date: Wed, 6 May 2026 14:26:54 +0500 Subject: [PATCH 1/9] docs: add platform licenses reference Signed-off-by: tym83 <6355522@gmail.com> --- content/en/docs/_include/licenses.md | 201 ++++++++++++++++++ .../next/operations/configuration/licenses.md | 8 + .../v1.2/operations/configuration/licenses.md | 8 + 3 files changed, 217 insertions(+) create mode 100644 content/en/docs/_include/licenses.md create mode 100644 content/en/docs/next/operations/configuration/licenses.md create mode 100644 content/en/docs/v1.2/operations/configuration/licenses.md diff --git a/content/en/docs/_include/licenses.md b/content/en/docs/_include/licenses.md new file mode 100644 index 00000000..118bbf8c --- /dev/null +++ b/content/en/docs/_include/licenses.md @@ -0,0 +1,201 @@ +This page lists the licenses for the primary components packaged with Cozystack. +Cozystack-maintained charts, CRDs, controllers, and application APIs are licensed under Apache-2.0. +When a package vendors or deploys an upstream component, the table shows the upstream component license. + +{{% alert color="info" %}} +This reference covers top-level Cozystack packages from `packages/core`, `packages/system`, `packages/apps`, and `packages/extra`, plus the primary managed workload runtimes. +Container images can include additional operating-system packages and library dependencies with their own licenses. +{{% /alert %}} + +## Core Packages + +| Package | Component | License | Source | +|---|---|---|---| +| `core/flux-aio` | Cozystack Flux AIO manifests | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/flux-aio) | +| `core/installer` | Cozystack installer chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/installer) | +| `core/platform` | Cozystack Platform Package chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/platform) | +| `core/talos` | Cozystack Talos assets | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/talos) | +| `core/testing` | Cozystack test chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/testing) | + +## System Packages + +| Package | Component | License | Source | +|---|---|---|---| +| `system/application-definition-crd` | Cozystack ApplicationDefinition CRD | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/application-definition-crd) | +| `system/backup-controller` | Cozystack backup controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/backup-controller) | +| `system/backupstrategy-controller` | Cozystack backup strategy controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/backupstrategy-controller) | +| `system/bootbox` | Tinkerbell Smee | Apache-2.0 | [source](https://github.com/tinkerbell/smee/blob/main/LICENSE) | +| `system/bootbox-rd` | Cozystack Bootbox resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/bootbox-rd) | +| `system/bucket` | S3 Manager | Apache-2.0 | [source](https://github.com/cloudlena/s3manager/blob/main/LICENSE) | +| `system/bucket-rd` | Cozystack Bucket resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/bucket-rd) | +| `system/capi-operator` | Cluster API Operator | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api-operator/blob/main/LICENSE) | +| `system/capi-providers-bootstrap` | Cluster API kubeadm bootstrap provider | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE) | +| `system/capi-providers-core` | Cluster API core provider | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE) | +| `system/capi-providers-cpprovider` | Kamaji Cluster API control-plane provider | Apache-2.0 | [source](https://github.com/clastix/cluster-api-control-plane-provider-kamaji/blob/master/LICENSE) | +| `system/capi-providers-infraprovider` | KubeVirt Cluster API infrastructure provider | Apache-2.0 | [source](https://github.com/kubevirt/cluster-api-provider-kubevirt/blob/main/LICENSE) | +| `system/cert-manager` | cert-manager | Apache-2.0 | [source](https://github.com/cert-manager/cert-manager/blob/master/LICENSE) | +| `system/cert-manager-crds` | cert-manager CRDs | Apache-2.0 | [source](https://github.com/cert-manager/cert-manager/blob/master/LICENSE) | +| `system/cert-manager-issuers` | Cozystack cert-manager issuers | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cert-manager-issuers) | +| `system/cilium` | Cilium | Apache-2.0 | [source](https://github.com/cilium/cilium/blob/main/LICENSE) | +| `system/cilium-networkpolicy` | Cozystack Cilium network policies | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cilium-networkpolicy) | +| `system/clickhouse-operator` | Altinity ClickHouse Operator | Apache-2.0 | [source](https://github.com/Altinity/clickhouse-operator/blob/master/LICENSE) | +| `system/clickhouse-rd` | Cozystack ClickHouse resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/clickhouse-rd) | +| `system/cluster-autoscaler` | Kubernetes Cluster Autoscaler | Apache-2.0 | [source](https://github.com/kubernetes/autoscaler/blob/master/LICENSE) | +| `system/clustersecret-operator` | SAP ClusterSecret Operator | Apache-2.0 | [source](https://github.com/SAP/clustersecret-operator/blob/main/LICENSE) | +| `system/coredns` | CoreDNS | Apache-2.0 | [source](https://github.com/coredns/coredns/blob/master/LICENSE) | +| `system/cozy-proxy` | cozy-proxy | Apache-2.0 | [source](https://github.com/cozystack/cozy-proxy/blob/main/LICENSE) | +| `system/cozystack-api` | Cozystack API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-api) | +| `system/cozystack-basics` | Cozystack basics | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-basics) | +| `system/cozystack-controller` | Cozystack controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-controller) | +| `system/cozystack-scheduler` | Cozystack scheduler | Apache-2.0 | [source](https://github.com/cozystack/cozystack-scheduler/blob/main/LICENSE) | +| `system/dashboard` | Cozystack dashboard | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/dashboard) | +| `system/etcd-operator` | Aenix etcd Operator | Apache-2.0 | [source](https://github.com/aenix-io/etcd-operator/blob/main/LICENSE) | +| `system/etcd-rd` | Cozystack etcd resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/etcd-rd) | +| `system/external-dns` | ExternalDNS | Apache-2.0 | [source](https://github.com/kubernetes-sigs/external-dns/blob/master/LICENSE.md) | +| `system/external-dns-rd` | Cozystack ExternalDNS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/external-dns-rd) | +| `system/external-secrets-operator` | External Secrets Operator | Apache-2.0 | [source](https://github.com/external-secrets/external-secrets/blob/main/LICENSE) | +| `system/flux-plunger` | Cozystack Flux plunger | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/flux-plunger) | +| `system/fluxcd` | ControlPlane Flux instance chart; Flux controllers | AGPL-3.0; Apache-2.0 | [charts](https://github.com/controlplaneio-fluxcd/charts/blob/main/LICENSE), [flux](https://github.com/fluxcd/flux2/blob/main/LICENSE) | +| `system/fluxcd-operator` | ControlPlane Flux Operator | AGPL-3.0 | [source](https://github.com/controlplaneio-fluxcd/flux-operator/blob/main/LICENSE) | +| `system/foundationdb-operator` | FoundationDB Kubernetes Operator | Apache-2.0 | [source](https://github.com/FoundationDB/fdb-kubernetes-operator/blob/main/LICENSE) | +| `system/foundationdb-rd` | Cozystack FoundationDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/foundationdb-rd) | +| `system/gateway-api-crds` | Kubernetes Gateway API CRDs | Apache-2.0 | [source](https://github.com/kubernetes-sigs/gateway-api/blob/main/LICENSE) | +| `system/goldpinger` | Goldpinger | Apache-2.0 | [source](https://github.com/bloomberg/goldpinger/blob/master/LICENSE) | +| `system/gpu-operator` | NVIDIA GPU Operator | Apache-2.0 | [source](https://github.com/NVIDIA/gpu-operator/blob/main/LICENSE) | +| `system/grafana-operator` | Grafana Operator | Apache-2.0 | [source](https://github.com/grafana/grafana-operator/blob/master/LICENSE) | +| `system/hami` | HAMi | Apache-2.0 | [source](https://github.com/Project-HAMi/HAMi/blob/master/LICENSE) | +| `system/harbor` | Harbor Helm chart | Apache-2.0 | [source](https://github.com/goharbor/harbor-helm/blob/main/LICENSE) | +| `system/harbor-rd` | Cozystack Harbor resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/harbor-rd) | +| `system/hetzner-robotlb` | RobotLB | MIT | [source](https://github.com/Intreecom/robotlb/blob/master/LICENSE) | +| `system/http-cache-rd` | Cozystack HTTP cache resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/http-cache-rd) | +| `system/info-rd` | Cozystack Info resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/info-rd) | +| `system/ingress-nginx` | ingress-nginx | Apache-2.0 | [source](https://github.com/kubernetes/ingress-nginx/blob/main/LICENSE) | +| `system/ingress-rd` | Cozystack Ingress resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/ingress-rd) | +| `system/kafka-operator` | Strimzi Kafka Operator | Apache-2.0 | [source](https://github.com/strimzi/strimzi-kafka-operator/blob/main/LICENSE) | +| `system/kafka-rd` | Cozystack Kafka resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kafka-rd) | +| `system/kamaji` | Kamaji | Apache-2.0 | [source](https://github.com/clastix/kamaji/blob/master/LICENSE) | +| `system/keycloak` | Keycloak | Apache-2.0 | [source](https://github.com/keycloak/keycloak/blob/main/LICENSE.txt) | +| `system/keycloak-configure` | Cozystack Keycloak configuration job | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/keycloak-configure) | +| `system/keycloak-operator` | KubeRocketCI Keycloak Operator | Apache-2.0 | [source](https://github.com/epam/edp-keycloak-operator/blob/master/LICENSE-2.0) | +| `system/kilo` | Kilo | Apache-2.0 | [source](https://github.com/squat/kilo/blob/main/LICENSE) | +| `system/kubeovn` | Kube-OVN chart | Apache-2.0 | [source](https://github.com/cozystack/kubeovn-chart/blob/main/LICENSE) | +| `system/kubeovn-plunger` | Cozystack Kube-OVN plunger | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubeovn-plunger) | +| `system/kubeovn-webhook` | Cozystack Kube-OVN webhook | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubeovn-webhook) | +| `system/kubernetes-rd` | Cozystack Kubernetes resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubernetes-rd) | +| `system/kubevirt` | KubeVirt | Apache-2.0 | [source](https://github.com/kubevirt/kubevirt/blob/main/LICENSE) | +| `system/kubevirt-cdi` | KubeVirt Containerized Data Importer | Apache-2.0 | [source](https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE) | +| `system/kubevirt-cdi-operator` | KubeVirt CDI Operator | Apache-2.0 | [source](https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE) | +| `system/kubevirt-csi-node` | KubeVirt CSI driver | Apache-2.0 | [source](https://github.com/kubevirt/csi-driver/blob/main/LICENSE) | +| `system/kubevirt-instancetypes` | KubeVirt common instancetypes | Apache-2.0 | [source](https://github.com/kubevirt/common-instancetypes/blob/main/LICENSE) | +| `system/kubevirt-operator` | KubeVirt Operator | Apache-2.0 | [source](https://github.com/kubevirt/kubevirt/blob/main/LICENSE) | +| `system/lineage-controller-webhook` | Cozystack lineage controller webhook | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/lineage-controller-webhook) | +| `system/linstor` | LINSTOR Server; LINSTOR CSI | GPL-3.0; Apache-2.0 | [server](https://github.com/LINBIT/linstor-server/blob/master/LICENSE), [csi](https://github.com/piraeusdatastore/linstor-csi/blob/master/LICENSE) | +| `system/linstor-gui` | LINSTOR GUI | GPL-3.0 | [source](https://github.com/LINBIT/linstor-gui) | +| `system/linstor-scheduler` | LINSTOR scheduler extender | Apache-2.0 | [source](https://github.com/piraeusdatastore/linstor-scheduler-extender/blob/master/LICENSE) | +| `system/local-ccm` | Local Cloud Controller Manager | Apache-2.0 | [source](https://github.com/cozystack/local-ccm/blob/main/LICENSE) | +| `system/mariadb-operator` | mariadb-operator | MIT | [source](https://github.com/mariadb-operator/mariadb-operator/blob/main/LICENSE) | +| `system/mariadb-rd` | Cozystack MariaDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/mariadb-rd) | +| `system/metallb` | MetalLB | Apache-2.0 | [source](https://github.com/metallb/metallb/blob/main/LICENSE) | +| `system/metrics-server` | Metrics Server | Apache-2.0 | [source](https://github.com/kubernetes-sigs/metrics-server/blob/master/LICENSE) | +| `system/mongodb-operator` | Percona Operator for MongoDB Helm chart | Apache-2.0 | [source](https://github.com/percona/percona-server-mongodb-operator/blob/main/LICENSE) | +| `system/mongodb-rd` | Cozystack MongoDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/mongodb-rd) | +| `system/monitoring` | Cozystack monitoring package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/monitoring) | +| `system/monitoring-agents` | Fluent Bit; kube-state-metrics; node-exporter | Apache-2.0 | [source](https://github.com/fluent/fluent-bit/blob/master/LICENSE) | +| `system/monitoring-rd` | Cozystack Monitoring resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/monitoring-rd) | +| `system/multus` | Multus CNI | Apache-2.0 | [source](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/LICENSE) | +| `system/nats` | NATS Helm chart | Apache-2.0 | [source](https://github.com/nats-io/k8s/blob/main/LICENSE) | +| `system/nats-rd` | Cozystack NATS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/nats-rd) | +| `system/nfs-driver` | CSI Driver NFS | Apache-2.0 | [source](https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/LICENSE) | +| `system/objectstorage-controller` | Container Object Storage Interface controller | Apache-2.0 | [source](https://github.com/kubernetes-sigs/container-object-storage-interface/blob/main/LICENSE) | +| `system/openbao` | OpenBao Helm chart | MPL-2.0 | [source](https://github.com/openbao/openbao-helm/blob/main/LICENSE) | +| `system/openbao-rd` | Cozystack OpenBao resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/openbao-rd) | +| `system/opencost` | OpenCost Helm chart | Apache-2.0 | [source](https://github.com/opencost/opencost-helm-chart/blob/main/LICENSE) | +| `system/opensearch-operator` | OpenSearch Operator | Apache-2.0 | [source](https://github.com/opensearch-project/opensearch-k8s-operator/blob/main/LICENSE) | +| `system/opensearch-rd` | Cozystack OpenSearch resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/opensearch-rd) | +| `system/piraeus-operator` | Piraeus Operator | Apache-2.0 | [source](https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE) | +| `system/piraeus-operator-crds` | Piraeus Operator CRDs | Apache-2.0 | [source](https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE) | +| `system/postgres-operator` | CloudNativePG operator chart | Apache-2.0 | [source](https://github.com/cloudnative-pg/charts/blob/main/LICENSE) | +| `system/postgres-rd` | Cozystack PostgreSQL resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/postgres-rd) | +| `system/prometheus-operator-crds` | Prometheus Operator CRDs chart | Apache-2.0 | [source](https://github.com/prometheus-community/helm-charts/blob/main/LICENSE) | +| `system/qdrant` | Qdrant Helm chart | Apache-2.0 | [source](https://github.com/qdrant/qdrant-helm/blob/main/LICENSE) | +| `system/qdrant-rd` | Cozystack Qdrant resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/qdrant-rd) | +| `system/rabbitmq-operator` | RabbitMQ cluster and topology operators | MPL-2.0 | [source](https://github.com/rabbitmq/cluster-operator/blob/main/LICENSE.txt) | +| `system/rabbitmq-rd` | Cozystack RabbitMQ resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/rabbitmq-rd) | +| `system/redis-operator` | Spotahome Redis Operator | Apache-2.0 | [source](https://github.com/spotahome/redis-operator/blob/master/LICENSE) | +| `system/redis-rd` | Cozystack Redis resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/redis-rd) | +| `system/reloader` | Stakater Reloader | Apache-2.0 | [source](https://github.com/stakater/Reloader/blob/master/LICENSE) | +| `system/seaweedfs` | SeaweedFS Helm chart | Apache-2.0 | [source](https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE) | +| `system/seaweedfs-rd` | Cozystack SeaweedFS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/seaweedfs-rd) | +| `system/snapshot-controller` | CSI external snapshotter | Apache-2.0 | [source](https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE) | +| `system/tcp-balancer-rd` | Cozystack TCP balancer resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/tcp-balancer-rd) | +| `system/telepresence` | Telepresence Traffic Manager chart | Apache-2.0 | [source](https://github.com/telepresenceio/telepresence/blob/release/v2/LICENSE) | +| `system/tenant-rd` | Cozystack Tenant resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/tenant-rd) | +| `system/velero` | Velero Helm chart | Apache-2.0 | [source](https://github.com/velero-io/velero/blob/main/LICENSE) | +| `system/vertical-pod-autoscaler` | Vertical Pod Autoscaler chart | MIT; Apache-2.0 | [source](https://github.com/cowboysysop/charts/blob/master/LICENSE) | +| `system/vertical-pod-autoscaler-crds` | Vertical Pod Autoscaler CRDs | Apache-2.0 | [source](https://github.com/kubernetes/autoscaler/blob/master/LICENSE) | +| `system/victoria-metrics-operator` | VictoriaMetrics Operator chart | Apache-2.0 | [source](https://github.com/VictoriaMetrics/operator/blob/master/LICENSE) | +| `system/virtualprivatecloud-rd` | Cozystack VPC resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/virtualprivatecloud-rd) | +| `system/vm-default-images` | Cozystack VM default image catalog | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-default-images) | +| `system/vm-disk-rd` | Cozystack VM disk resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-disk-rd) | +| `system/vm-instance-rd` | Cozystack VM instance resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-instance-rd) | +| `system/vpn-rd` | Cozystack VPN resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vpn-rd) | +| `system/vsnap-crd` | CSI VolumeSnapshot CRDs | Apache-2.0 | [source](https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE) | + +## Application and Extra Packages + +The following packages define Cozystack application APIs and tenant-level extras. Their package source is Apache-2.0; runtime software licenses for managed services are listed in the next section. + +| Package | Component | License | Source | +|---|---|---|---| +| `apps/bucket` | Cozystack Bucket application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/bucket) | +| `apps/clickhouse` | Cozystack ClickHouse application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/clickhouse) | +| `apps/foundationdb` | Cozystack FoundationDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/foundationdb) | +| `apps/harbor` | Cozystack Harbor application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/harbor) | +| `apps/http-cache` | Cozystack HTTP cache application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/http-cache) | +| `apps/kafka` | Cozystack Kafka application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/kafka) | +| `apps/kubernetes` | Cozystack Kubernetes application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/kubernetes) | +| `apps/mariadb` | Cozystack MariaDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/mariadb) | +| `apps/mongodb` | Cozystack MongoDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/mongodb) | +| `apps/nats` | Cozystack NATS application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/nats) | +| `apps/openbao` | Cozystack OpenBao application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/openbao) | +| `apps/opensearch` | Cozystack OpenSearch application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/opensearch) | +| `apps/postgres` | Cozystack PostgreSQL application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/postgres) | +| `apps/qdrant` | Cozystack Qdrant application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/qdrant) | +| `apps/rabbitmq` | Cozystack RabbitMQ application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/rabbitmq) | +| `apps/redis` | Cozystack Redis application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/redis) | +| `apps/tcp-balancer` | Cozystack TCP balancer application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/tcp-balancer) | +| `apps/tenant` | Cozystack Tenant application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/tenant) | +| `apps/vm-disk` | Cozystack VM disk application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vm-disk) | +| `apps/vm-instance` | Cozystack VM instance application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vm-instance) | +| `apps/vpc` | Cozystack VPC application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vpc) | +| `apps/vpn` | Cozystack VPN application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vpn) | +| `extra/bootbox` | Cozystack Bootbox extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/bootbox) | +| `extra/etcd` | Cozystack etcd extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/etcd) | +| `extra/external-dns` | Cozystack ExternalDNS extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/external-dns) | +| `extra/info` | Cozystack Info extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/info) | +| `extra/ingress` | Cozystack Ingress extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/ingress) | +| `extra/monitoring` | Cozystack Monitoring extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/monitoring) | +| `extra/seaweedfs` | Cozystack SeaweedFS extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/seaweedfs) | + +## Managed Workload Runtimes + +| Managed service | Runtime component | License | Source | +|---|---|---|---| +| Bucket/Object Storage | SeaweedFS; S3 Manager | Apache-2.0 | [seaweedfs](https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE), [s3manager](https://github.com/cloudlena/s3manager/blob/main/LICENSE) | +| ClickHouse | ClickHouse Server and ClickHouse Keeper | Apache-2.0 | [source](https://github.com/ClickHouse/ClickHouse/blob/master/LICENSE) | +| FoundationDB | FoundationDB | Apache-2.0 | [source](https://github.com/apple/foundationdb/blob/main/LICENSE) | +| Harbor | Harbor | Apache-2.0 | [source](https://github.com/goharbor/harbor/blob/main/LICENSE) | +| HTTP Cache | NGINX; HAProxy; IP2Location/IP2Proxy modules | BSD-2-Clause; GPL-2.0 with exceptions; MIT | [nginx](https://github.com/nginx/nginx/blob/master/LICENSE), [haproxy](https://github.com/haproxy/haproxy/blob/master/LICENSE), [ip2location](https://github.com/ip2location/ip2location-nginx/blob/master/LICENSE), [ip2proxy](https://github.com/ip2location/ip2proxy-nginx/blob/master/LICENSE) | +| Kafka | Apache Kafka through Strimzi | Apache-2.0 | [source](https://github.com/apache/kafka/blob/trunk/LICENSE) | +| Kubernetes | Kubernetes control plane and add-ons | Apache-2.0 | [source](https://github.com/kubernetes/kubernetes/blob/master/LICENSE) | +| MariaDB | MariaDB Server | GPL-2.0 | [source](https://github.com/MariaDB/server/blob/main/COPYING) | +| MongoDB | Percona Server for MongoDB | SSPL-1.0 | [source](https://github.com/percona/percona-server-mongodb/blob/master/LICENSE-Community.txt) | +| NATS | NATS Server | Apache-2.0 | [source](https://github.com/nats-io/nats-server/blob/main/LICENSE) | +| OpenBao | OpenBao | MPL-2.0 | [source](https://github.com/openbao/openbao/blob/main/LICENSE) | +| OpenSearch | OpenSearch | Apache-2.0 | [source](https://github.com/opensearch-project/OpenSearch/blob/main/LICENSE.txt) | +| PostgreSQL | PostgreSQL | PostgreSQL License | [source](https://www.postgresql.org/about/licence/) | +| Qdrant | Qdrant | Apache-2.0 | [source](https://github.com/qdrant/qdrant/blob/master/LICENSE) | +| RabbitMQ | RabbitMQ Server | MPL-2.0; Apache-2.0 for some files | [source](https://github.com/rabbitmq/rabbitmq-server/blob/main/LICENSE) | +| Redis | Redis 7.4 and Redis 8 | RSALv2 or SSPLv1; Redis 8 also AGPLv3 | [source](https://redis.io/legal/licenses/) | +| TCP Balancer | HAProxy | GPL-2.0 with exceptions | [source](https://github.com/haproxy/haproxy/blob/master/LICENSE) | +| VPN | Outline Shadowsocks server | Apache-2.0 | [source](https://github.com/OutlineFoundation/outline-server/blob/master/LICENSE) | diff --git a/content/en/docs/next/operations/configuration/licenses.md b/content/en/docs/next/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/next/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} diff --git a/content/en/docs/v1.2/operations/configuration/licenses.md b/content/en/docs/v1.2/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/v1.2/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} From da836bdbb077396da9ba096fd2c7eb28572453fa Mon Sep 17 00:00:00 2001 From: tym83 <6355522@gmail.com> Date: Wed, 6 May 2026 23:54:47 +0500 Subject: [PATCH 2/9] docs: publish licenses page for all versions Signed-off-by: tym83 <6355522@gmail.com> --- content/en/docs/v0/operations/configuration/licenses.md | 8 ++++++++ content/en/docs/v1.0/operations/configuration/licenses.md | 8 ++++++++ content/en/docs/v1.1/operations/configuration/licenses.md | 8 ++++++++ content/en/docs/v1.3/operations/configuration/licenses.md | 8 ++++++++ 4 files changed, 32 insertions(+) create mode 100644 content/en/docs/v0/operations/configuration/licenses.md create mode 100644 content/en/docs/v1.0/operations/configuration/licenses.md create mode 100644 content/en/docs/v1.1/operations/configuration/licenses.md create mode 100644 content/en/docs/v1.3/operations/configuration/licenses.md diff --git a/content/en/docs/v0/operations/configuration/licenses.md b/content/en/docs/v0/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/v0/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} diff --git a/content/en/docs/v1.0/operations/configuration/licenses.md b/content/en/docs/v1.0/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/v1.0/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} diff --git a/content/en/docs/v1.1/operations/configuration/licenses.md b/content/en/docs/v1.1/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/v1.1/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} diff --git a/content/en/docs/v1.3/operations/configuration/licenses.md b/content/en/docs/v1.3/operations/configuration/licenses.md new file mode 100644 index 00000000..cc2bc9f9 --- /dev/null +++ b/content/en/docs/v1.3/operations/configuration/licenses.md @@ -0,0 +1,8 @@ +--- +title: "Licenses" +linkTitle: "Licenses" +description: "License reference for Cozystack platform components." +weight: 40 +--- + +{{< include "docs/_include/licenses.md" >}} From 614c6a553c1a01f62fb1459639f5fdb3c4886f86 Mon Sep 17 00:00:00 2001 From: tym83 <6355522@gmail.com> Date: Mon, 11 May 2026 14:03:09 +0500 Subject: [PATCH 3/9] docs(licenses): rework as oss-card grid, scope to next + v1.3 Aggregate sub-components into top-level entries (one KubeVirt instead of six packages, one LINSTOR/Piraeus instead of four, etc.) and present them as a card grid inspired by the Deckhouse OSS-info layout. Address @myasnikovdaniil review on #530: - drop license pages from v0/v1.0/v1.1/v1.2 (frozen per-release snapshots, current package list doesn't apply to those releases) - drop shared _include/licenses.md and inline content per version (matches existing per-version _include/ convention by avoiding it) - monitoring agents and LINSTOR sub-components now linked to the correct upstream LICENSE files Generator script tracked as a separate follow-up. Signed-off-by: tym83 <6355522@gmail.com> --- assets/scss/_oss_info.scss | 138 ++++++++++++ assets/scss/main.scss | 1 + content/en/docs/_include/licenses.md | 201 ------------------ .../next/operations/configuration/licenses.md | 130 ++++++++++- .../v0/operations/configuration/licenses.md | 8 - .../v1.0/operations/configuration/licenses.md | 8 - .../v1.1/operations/configuration/licenses.md | 8 - .../v1.2/operations/configuration/licenses.md | 8 - .../v1.3/operations/configuration/licenses.md | 130 ++++++++++- layouts/shortcodes/oss-card.html | 46 ++++ layouts/shortcodes/oss-cards.html | 12 ++ 11 files changed, 451 insertions(+), 239 deletions(-) create mode 100644 assets/scss/_oss_info.scss delete mode 100644 content/en/docs/_include/licenses.md delete mode 100644 content/en/docs/v0/operations/configuration/licenses.md delete mode 100644 content/en/docs/v1.0/operations/configuration/licenses.md delete mode 100644 content/en/docs/v1.1/operations/configuration/licenses.md delete mode 100644 content/en/docs/v1.2/operations/configuration/licenses.md create mode 100644 layouts/shortcodes/oss-card.html create mode 100644 layouts/shortcodes/oss-cards.html diff --git a/assets/scss/_oss_info.scss b/assets/scss/_oss_info.scss new file mode 100644 index 00000000..f3679251 --- /dev/null +++ b/assets/scss/_oss_info.scss @@ -0,0 +1,138 @@ +// Component cards for /operations/configuration/licenses/ +// Inspired by Deckhouse OSS-info layout. + +.oss-cards-grid { + display: grid; + grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); + gap: 1rem; + margin: 1.5rem 0 2rem; + + // Hugo wraps shortcode output in
when the parent is markdown.
+ // Flatten that so cards sit directly in the grid.
+ > p {
+ display: contents;
+ }
+}
+
+.oss-card {
+ display: flex;
+ flex-direction: column;
+ gap: .5rem;
+ padding: 1rem 1.1rem;
+ border: 1px solid var(--bs-gray-300, #dee2e6);
+ border-radius: .5rem;
+ background: var(--bs-body-bg, #fff);
+ transition: border-color .15s ease, box-shadow .15s ease, transform .15s ease;
+
+ &:hover {
+ border-color: var(--bs-primary, #0d6efd);
+ box-shadow: 0 2px 8px rgba(0, 0, 0, .06);
+ transform: translateY(-1px);
+ }
+}
+
+.oss-card-head {
+ display: flex;
+ align-items: center;
+ gap: .65rem;
+}
+
+.oss-card-logo {
+ width: 36px;
+ height: 36px;
+ flex-shrink: 0;
+ object-fit: contain;
+ border-radius: 6px;
+}
+
+.oss-card-logo-fallback {
+ display: inline-flex;
+ align-items: center;
+ justify-content: center;
+ font-family: var(--bs-font-monospace, ui-monospace, monospace);
+ font-size: .8rem;
+ font-weight: 600;
+ letter-spacing: .02em;
+ color: #fff;
+ background: hsl(var(--oss-hue, 210), 55%, 45%);
+ user-select: none;
+}
+
+.oss-card-titleblock {
+ display: flex;
+ flex-direction: column;
+ min-width: 0;
+}
+
+.oss-card-title {
+ font-weight: 600;
+ font-size: 1rem;
+ line-height: 1.25;
+ color: inherit;
+ text-decoration: none;
+ word-break: break-word;
+
+ &:hover {
+ color: var(--bs-primary, #0d6efd);
+ text-decoration: underline;
+ }
+}
+
+.oss-card-version {
+ font-family: var(--bs-font-monospace, ui-monospace, monospace);
+ font-size: .8rem;
+ color: var(--bs-secondary, #6c757d);
+ margin-top: 1px;
+}
+
+.oss-card-desc {
+ margin: 0;
+ font-size: .9rem;
+ color: var(--bs-body-color, #212529);
+ line-height: 1.4;
+}
+
+.oss-card-meta {
+ display: flex;
+ flex-wrap: wrap;
+ align-items: center;
+ gap: .35rem;
+ font-size: .82rem;
+ color: var(--bs-secondary, #6c757d);
+ margin-top: auto;
+ padding-top: .25rem;
+}
+
+.oss-card-license {
+ font-family: var(--bs-font-monospace, ui-monospace, monospace);
+ background: var(--bs-gray-100, #f8f9fa);
+ border: 1px solid var(--bs-gray-200, #e9ecef);
+ border-radius: 3px;
+ padding: .05rem .4rem;
+ color: var(--bs-body-color, #212529);
+ font-size: .78rem;
+}
+
+.oss-card-usedin {
+ color: inherit;
+ text-decoration: none;
+ border-bottom: 1px dashed currentColor;
+
+ &:hover {
+ color: var(--bs-primary, #0d6efd);
+ border-bottom-style: solid;
+ }
+}
+
+// Dark mode (Docsy supports it via data-bs-theme="dark")
+[data-bs-theme="dark"] {
+ .oss-card {
+ border-color: var(--bs-gray-700, #495057);
+ background: var(--bs-gray-900, #212529);
+ }
+
+ .oss-card-license {
+ background: var(--bs-gray-800, #343a40);
+ border-color: var(--bs-gray-700, #495057);
+ }
+}
diff --git a/assets/scss/main.scss b/assets/scss/main.scss
index e91fab0b..89999676 100644
--- a/assets/scss/main.scss
+++ b/assets/scss/main.scss
@@ -157,6 +157,7 @@ a {
@import "support";
@import "ecosystem";
@import "oss_health";
+@import "oss_info";
@import "adopters_wall";
@import "announcement-banner";
@import "tabs_alerts";
diff --git a/content/en/docs/_include/licenses.md b/content/en/docs/_include/licenses.md
deleted file mode 100644
index 118bbf8c..00000000
--- a/content/en/docs/_include/licenses.md
+++ /dev/null
@@ -1,201 +0,0 @@
-This page lists the licenses for the primary components packaged with Cozystack.
-Cozystack-maintained charts, CRDs, controllers, and application APIs are licensed under Apache-2.0.
-When a package vendors or deploys an upstream component, the table shows the upstream component license.
-
-{{% alert color="info" %}}
-This reference covers top-level Cozystack packages from `packages/core`, `packages/system`, `packages/apps`, and `packages/extra`, plus the primary managed workload runtimes.
-Container images can include additional operating-system packages and library dependencies with their own licenses.
-{{% /alert %}}
-
-## Core Packages
-
-| Package | Component | License | Source |
-|---|---|---|---|
-| `core/flux-aio` | Cozystack Flux AIO manifests | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/flux-aio) |
-| `core/installer` | Cozystack installer chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/installer) |
-| `core/platform` | Cozystack Platform Package chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/platform) |
-| `core/talos` | Cozystack Talos assets | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/talos) |
-| `core/testing` | Cozystack test chart | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/core/testing) |
-
-## System Packages
-
-| Package | Component | License | Source |
-|---|---|---|---|
-| `system/application-definition-crd` | Cozystack ApplicationDefinition CRD | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/application-definition-crd) |
-| `system/backup-controller` | Cozystack backup controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/backup-controller) |
-| `system/backupstrategy-controller` | Cozystack backup strategy controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/backupstrategy-controller) |
-| `system/bootbox` | Tinkerbell Smee | Apache-2.0 | [source](https://github.com/tinkerbell/smee/blob/main/LICENSE) |
-| `system/bootbox-rd` | Cozystack Bootbox resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/bootbox-rd) |
-| `system/bucket` | S3 Manager | Apache-2.0 | [source](https://github.com/cloudlena/s3manager/blob/main/LICENSE) |
-| `system/bucket-rd` | Cozystack Bucket resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/bucket-rd) |
-| `system/capi-operator` | Cluster API Operator | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api-operator/blob/main/LICENSE) |
-| `system/capi-providers-bootstrap` | Cluster API kubeadm bootstrap provider | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE) |
-| `system/capi-providers-core` | Cluster API core provider | Apache-2.0 | [source](https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE) |
-| `system/capi-providers-cpprovider` | Kamaji Cluster API control-plane provider | Apache-2.0 | [source](https://github.com/clastix/cluster-api-control-plane-provider-kamaji/blob/master/LICENSE) |
-| `system/capi-providers-infraprovider` | KubeVirt Cluster API infrastructure provider | Apache-2.0 | [source](https://github.com/kubevirt/cluster-api-provider-kubevirt/blob/main/LICENSE) |
-| `system/cert-manager` | cert-manager | Apache-2.0 | [source](https://github.com/cert-manager/cert-manager/blob/master/LICENSE) |
-| `system/cert-manager-crds` | cert-manager CRDs | Apache-2.0 | [source](https://github.com/cert-manager/cert-manager/blob/master/LICENSE) |
-| `system/cert-manager-issuers` | Cozystack cert-manager issuers | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cert-manager-issuers) |
-| `system/cilium` | Cilium | Apache-2.0 | [source](https://github.com/cilium/cilium/blob/main/LICENSE) |
-| `system/cilium-networkpolicy` | Cozystack Cilium network policies | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cilium-networkpolicy) |
-| `system/clickhouse-operator` | Altinity ClickHouse Operator | Apache-2.0 | [source](https://github.com/Altinity/clickhouse-operator/blob/master/LICENSE) |
-| `system/clickhouse-rd` | Cozystack ClickHouse resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/clickhouse-rd) |
-| `system/cluster-autoscaler` | Kubernetes Cluster Autoscaler | Apache-2.0 | [source](https://github.com/kubernetes/autoscaler/blob/master/LICENSE) |
-| `system/clustersecret-operator` | SAP ClusterSecret Operator | Apache-2.0 | [source](https://github.com/SAP/clustersecret-operator/blob/main/LICENSE) |
-| `system/coredns` | CoreDNS | Apache-2.0 | [source](https://github.com/coredns/coredns/blob/master/LICENSE) |
-| `system/cozy-proxy` | cozy-proxy | Apache-2.0 | [source](https://github.com/cozystack/cozy-proxy/blob/main/LICENSE) |
-| `system/cozystack-api` | Cozystack API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-api) |
-| `system/cozystack-basics` | Cozystack basics | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-basics) |
-| `system/cozystack-controller` | Cozystack controller | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/cozystack-controller) |
-| `system/cozystack-scheduler` | Cozystack scheduler | Apache-2.0 | [source](https://github.com/cozystack/cozystack-scheduler/blob/main/LICENSE) |
-| `system/dashboard` | Cozystack dashboard | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/dashboard) |
-| `system/etcd-operator` | Aenix etcd Operator | Apache-2.0 | [source](https://github.com/aenix-io/etcd-operator/blob/main/LICENSE) |
-| `system/etcd-rd` | Cozystack etcd resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/etcd-rd) |
-| `system/external-dns` | ExternalDNS | Apache-2.0 | [source](https://github.com/kubernetes-sigs/external-dns/blob/master/LICENSE.md) |
-| `system/external-dns-rd` | Cozystack ExternalDNS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/external-dns-rd) |
-| `system/external-secrets-operator` | External Secrets Operator | Apache-2.0 | [source](https://github.com/external-secrets/external-secrets/blob/main/LICENSE) |
-| `system/flux-plunger` | Cozystack Flux plunger | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/flux-plunger) |
-| `system/fluxcd` | ControlPlane Flux instance chart; Flux controllers | AGPL-3.0; Apache-2.0 | [charts](https://github.com/controlplaneio-fluxcd/charts/blob/main/LICENSE), [flux](https://github.com/fluxcd/flux2/blob/main/LICENSE) |
-| `system/fluxcd-operator` | ControlPlane Flux Operator | AGPL-3.0 | [source](https://github.com/controlplaneio-fluxcd/flux-operator/blob/main/LICENSE) |
-| `system/foundationdb-operator` | FoundationDB Kubernetes Operator | Apache-2.0 | [source](https://github.com/FoundationDB/fdb-kubernetes-operator/blob/main/LICENSE) |
-| `system/foundationdb-rd` | Cozystack FoundationDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/foundationdb-rd) |
-| `system/gateway-api-crds` | Kubernetes Gateway API CRDs | Apache-2.0 | [source](https://github.com/kubernetes-sigs/gateway-api/blob/main/LICENSE) |
-| `system/goldpinger` | Goldpinger | Apache-2.0 | [source](https://github.com/bloomberg/goldpinger/blob/master/LICENSE) |
-| `system/gpu-operator` | NVIDIA GPU Operator | Apache-2.0 | [source](https://github.com/NVIDIA/gpu-operator/blob/main/LICENSE) |
-| `system/grafana-operator` | Grafana Operator | Apache-2.0 | [source](https://github.com/grafana/grafana-operator/blob/master/LICENSE) |
-| `system/hami` | HAMi | Apache-2.0 | [source](https://github.com/Project-HAMi/HAMi/blob/master/LICENSE) |
-| `system/harbor` | Harbor Helm chart | Apache-2.0 | [source](https://github.com/goharbor/harbor-helm/blob/main/LICENSE) |
-| `system/harbor-rd` | Cozystack Harbor resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/harbor-rd) |
-| `system/hetzner-robotlb` | RobotLB | MIT | [source](https://github.com/Intreecom/robotlb/blob/master/LICENSE) |
-| `system/http-cache-rd` | Cozystack HTTP cache resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/http-cache-rd) |
-| `system/info-rd` | Cozystack Info resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/info-rd) |
-| `system/ingress-nginx` | ingress-nginx | Apache-2.0 | [source](https://github.com/kubernetes/ingress-nginx/blob/main/LICENSE) |
-| `system/ingress-rd` | Cozystack Ingress resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/ingress-rd) |
-| `system/kafka-operator` | Strimzi Kafka Operator | Apache-2.0 | [source](https://github.com/strimzi/strimzi-kafka-operator/blob/main/LICENSE) |
-| `system/kafka-rd` | Cozystack Kafka resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kafka-rd) |
-| `system/kamaji` | Kamaji | Apache-2.0 | [source](https://github.com/clastix/kamaji/blob/master/LICENSE) |
-| `system/keycloak` | Keycloak | Apache-2.0 | [source](https://github.com/keycloak/keycloak/blob/main/LICENSE.txt) |
-| `system/keycloak-configure` | Cozystack Keycloak configuration job | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/keycloak-configure) |
-| `system/keycloak-operator` | KubeRocketCI Keycloak Operator | Apache-2.0 | [source](https://github.com/epam/edp-keycloak-operator/blob/master/LICENSE-2.0) |
-| `system/kilo` | Kilo | Apache-2.0 | [source](https://github.com/squat/kilo/blob/main/LICENSE) |
-| `system/kubeovn` | Kube-OVN chart | Apache-2.0 | [source](https://github.com/cozystack/kubeovn-chart/blob/main/LICENSE) |
-| `system/kubeovn-plunger` | Cozystack Kube-OVN plunger | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubeovn-plunger) |
-| `system/kubeovn-webhook` | Cozystack Kube-OVN webhook | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubeovn-webhook) |
-| `system/kubernetes-rd` | Cozystack Kubernetes resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/kubernetes-rd) |
-| `system/kubevirt` | KubeVirt | Apache-2.0 | [source](https://github.com/kubevirt/kubevirt/blob/main/LICENSE) |
-| `system/kubevirt-cdi` | KubeVirt Containerized Data Importer | Apache-2.0 | [source](https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE) |
-| `system/kubevirt-cdi-operator` | KubeVirt CDI Operator | Apache-2.0 | [source](https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE) |
-| `system/kubevirt-csi-node` | KubeVirt CSI driver | Apache-2.0 | [source](https://github.com/kubevirt/csi-driver/blob/main/LICENSE) |
-| `system/kubevirt-instancetypes` | KubeVirt common instancetypes | Apache-2.0 | [source](https://github.com/kubevirt/common-instancetypes/blob/main/LICENSE) |
-| `system/kubevirt-operator` | KubeVirt Operator | Apache-2.0 | [source](https://github.com/kubevirt/kubevirt/blob/main/LICENSE) |
-| `system/lineage-controller-webhook` | Cozystack lineage controller webhook | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/lineage-controller-webhook) |
-| `system/linstor` | LINSTOR Server; LINSTOR CSI | GPL-3.0; Apache-2.0 | [server](https://github.com/LINBIT/linstor-server/blob/master/LICENSE), [csi](https://github.com/piraeusdatastore/linstor-csi/blob/master/LICENSE) |
-| `system/linstor-gui` | LINSTOR GUI | GPL-3.0 | [source](https://github.com/LINBIT/linstor-gui) |
-| `system/linstor-scheduler` | LINSTOR scheduler extender | Apache-2.0 | [source](https://github.com/piraeusdatastore/linstor-scheduler-extender/blob/master/LICENSE) |
-| `system/local-ccm` | Local Cloud Controller Manager | Apache-2.0 | [source](https://github.com/cozystack/local-ccm/blob/main/LICENSE) |
-| `system/mariadb-operator` | mariadb-operator | MIT | [source](https://github.com/mariadb-operator/mariadb-operator/blob/main/LICENSE) |
-| `system/mariadb-rd` | Cozystack MariaDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/mariadb-rd) |
-| `system/metallb` | MetalLB | Apache-2.0 | [source](https://github.com/metallb/metallb/blob/main/LICENSE) |
-| `system/metrics-server` | Metrics Server | Apache-2.0 | [source](https://github.com/kubernetes-sigs/metrics-server/blob/master/LICENSE) |
-| `system/mongodb-operator` | Percona Operator for MongoDB Helm chart | Apache-2.0 | [source](https://github.com/percona/percona-server-mongodb-operator/blob/main/LICENSE) |
-| `system/mongodb-rd` | Cozystack MongoDB resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/mongodb-rd) |
-| `system/monitoring` | Cozystack monitoring package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/monitoring) |
-| `system/monitoring-agents` | Fluent Bit; kube-state-metrics; node-exporter | Apache-2.0 | [source](https://github.com/fluent/fluent-bit/blob/master/LICENSE) |
-| `system/monitoring-rd` | Cozystack Monitoring resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/monitoring-rd) |
-| `system/multus` | Multus CNI | Apache-2.0 | [source](https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/LICENSE) |
-| `system/nats` | NATS Helm chart | Apache-2.0 | [source](https://github.com/nats-io/k8s/blob/main/LICENSE) |
-| `system/nats-rd` | Cozystack NATS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/nats-rd) |
-| `system/nfs-driver` | CSI Driver NFS | Apache-2.0 | [source](https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/LICENSE) |
-| `system/objectstorage-controller` | Container Object Storage Interface controller | Apache-2.0 | [source](https://github.com/kubernetes-sigs/container-object-storage-interface/blob/main/LICENSE) |
-| `system/openbao` | OpenBao Helm chart | MPL-2.0 | [source](https://github.com/openbao/openbao-helm/blob/main/LICENSE) |
-| `system/openbao-rd` | Cozystack OpenBao resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/openbao-rd) |
-| `system/opencost` | OpenCost Helm chart | Apache-2.0 | [source](https://github.com/opencost/opencost-helm-chart/blob/main/LICENSE) |
-| `system/opensearch-operator` | OpenSearch Operator | Apache-2.0 | [source](https://github.com/opensearch-project/opensearch-k8s-operator/blob/main/LICENSE) |
-| `system/opensearch-rd` | Cozystack OpenSearch resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/opensearch-rd) |
-| `system/piraeus-operator` | Piraeus Operator | Apache-2.0 | [source](https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE) |
-| `system/piraeus-operator-crds` | Piraeus Operator CRDs | Apache-2.0 | [source](https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE) |
-| `system/postgres-operator` | CloudNativePG operator chart | Apache-2.0 | [source](https://github.com/cloudnative-pg/charts/blob/main/LICENSE) |
-| `system/postgres-rd` | Cozystack PostgreSQL resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/postgres-rd) |
-| `system/prometheus-operator-crds` | Prometheus Operator CRDs chart | Apache-2.0 | [source](https://github.com/prometheus-community/helm-charts/blob/main/LICENSE) |
-| `system/qdrant` | Qdrant Helm chart | Apache-2.0 | [source](https://github.com/qdrant/qdrant-helm/blob/main/LICENSE) |
-| `system/qdrant-rd` | Cozystack Qdrant resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/qdrant-rd) |
-| `system/rabbitmq-operator` | RabbitMQ cluster and topology operators | MPL-2.0 | [source](https://github.com/rabbitmq/cluster-operator/blob/main/LICENSE.txt) |
-| `system/rabbitmq-rd` | Cozystack RabbitMQ resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/rabbitmq-rd) |
-| `system/redis-operator` | Spotahome Redis Operator | Apache-2.0 | [source](https://github.com/spotahome/redis-operator/blob/master/LICENSE) |
-| `system/redis-rd` | Cozystack Redis resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/redis-rd) |
-| `system/reloader` | Stakater Reloader | Apache-2.0 | [source](https://github.com/stakater/Reloader/blob/master/LICENSE) |
-| `system/seaweedfs` | SeaweedFS Helm chart | Apache-2.0 | [source](https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE) |
-| `system/seaweedfs-rd` | Cozystack SeaweedFS resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/seaweedfs-rd) |
-| `system/snapshot-controller` | CSI external snapshotter | Apache-2.0 | [source](https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE) |
-| `system/tcp-balancer-rd` | Cozystack TCP balancer resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/tcp-balancer-rd) |
-| `system/telepresence` | Telepresence Traffic Manager chart | Apache-2.0 | [source](https://github.com/telepresenceio/telepresence/blob/release/v2/LICENSE) |
-| `system/tenant-rd` | Cozystack Tenant resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/tenant-rd) |
-| `system/velero` | Velero Helm chart | Apache-2.0 | [source](https://github.com/velero-io/velero/blob/main/LICENSE) |
-| `system/vertical-pod-autoscaler` | Vertical Pod Autoscaler chart | MIT; Apache-2.0 | [source](https://github.com/cowboysysop/charts/blob/master/LICENSE) |
-| `system/vertical-pod-autoscaler-crds` | Vertical Pod Autoscaler CRDs | Apache-2.0 | [source](https://github.com/kubernetes/autoscaler/blob/master/LICENSE) |
-| `system/victoria-metrics-operator` | VictoriaMetrics Operator chart | Apache-2.0 | [source](https://github.com/VictoriaMetrics/operator/blob/master/LICENSE) |
-| `system/virtualprivatecloud-rd` | Cozystack VPC resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/virtualprivatecloud-rd) |
-| `system/vm-default-images` | Cozystack VM default image catalog | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-default-images) |
-| `system/vm-disk-rd` | Cozystack VM disk resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-disk-rd) |
-| `system/vm-instance-rd` | Cozystack VM instance resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vm-instance-rd) |
-| `system/vpn-rd` | Cozystack VPN resource definition | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/system/vpn-rd) |
-| `system/vsnap-crd` | CSI VolumeSnapshot CRDs | Apache-2.0 | [source](https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE) |
-
-## Application and Extra Packages
-
-The following packages define Cozystack application APIs and tenant-level extras. Their package source is Apache-2.0; runtime software licenses for managed services are listed in the next section.
-
-| Package | Component | License | Source |
-|---|---|---|---|
-| `apps/bucket` | Cozystack Bucket application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/bucket) |
-| `apps/clickhouse` | Cozystack ClickHouse application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/clickhouse) |
-| `apps/foundationdb` | Cozystack FoundationDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/foundationdb) |
-| `apps/harbor` | Cozystack Harbor application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/harbor) |
-| `apps/http-cache` | Cozystack HTTP cache application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/http-cache) |
-| `apps/kafka` | Cozystack Kafka application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/kafka) |
-| `apps/kubernetes` | Cozystack Kubernetes application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/kubernetes) |
-| `apps/mariadb` | Cozystack MariaDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/mariadb) |
-| `apps/mongodb` | Cozystack MongoDB application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/mongodb) |
-| `apps/nats` | Cozystack NATS application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/nats) |
-| `apps/openbao` | Cozystack OpenBao application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/openbao) |
-| `apps/opensearch` | Cozystack OpenSearch application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/opensearch) |
-| `apps/postgres` | Cozystack PostgreSQL application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/postgres) |
-| `apps/qdrant` | Cozystack Qdrant application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/qdrant) |
-| `apps/rabbitmq` | Cozystack RabbitMQ application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/rabbitmq) |
-| `apps/redis` | Cozystack Redis application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/redis) |
-| `apps/tcp-balancer` | Cozystack TCP balancer application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/tcp-balancer) |
-| `apps/tenant` | Cozystack Tenant application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/tenant) |
-| `apps/vm-disk` | Cozystack VM disk application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vm-disk) |
-| `apps/vm-instance` | Cozystack VM instance application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vm-instance) |
-| `apps/vpc` | Cozystack VPC application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vpc) |
-| `apps/vpn` | Cozystack VPN application API | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/apps/vpn) |
-| `extra/bootbox` | Cozystack Bootbox extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/bootbox) |
-| `extra/etcd` | Cozystack etcd extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/etcd) |
-| `extra/external-dns` | Cozystack ExternalDNS extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/external-dns) |
-| `extra/info` | Cozystack Info extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/info) |
-| `extra/ingress` | Cozystack Ingress extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/ingress) |
-| `extra/monitoring` | Cozystack Monitoring extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/monitoring) |
-| `extra/seaweedfs` | Cozystack SeaweedFS extra package | Apache-2.0 | [source](https://github.com/cozystack/cozystack/tree/main/packages/extra/seaweedfs) |
-
-## Managed Workload Runtimes
-
-| Managed service | Runtime component | License | Source |
-|---|---|---|---|
-| Bucket/Object Storage | SeaweedFS; S3 Manager | Apache-2.0 | [seaweedfs](https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE), [s3manager](https://github.com/cloudlena/s3manager/blob/main/LICENSE) |
-| ClickHouse | ClickHouse Server and ClickHouse Keeper | Apache-2.0 | [source](https://github.com/ClickHouse/ClickHouse/blob/master/LICENSE) |
-| FoundationDB | FoundationDB | Apache-2.0 | [source](https://github.com/apple/foundationdb/blob/main/LICENSE) |
-| Harbor | Harbor | Apache-2.0 | [source](https://github.com/goharbor/harbor/blob/main/LICENSE) |
-| HTTP Cache | NGINX; HAProxy; IP2Location/IP2Proxy modules | BSD-2-Clause; GPL-2.0 with exceptions; MIT | [nginx](https://github.com/nginx/nginx/blob/master/LICENSE), [haproxy](https://github.com/haproxy/haproxy/blob/master/LICENSE), [ip2location](https://github.com/ip2location/ip2location-nginx/blob/master/LICENSE), [ip2proxy](https://github.com/ip2location/ip2proxy-nginx/blob/master/LICENSE) |
-| Kafka | Apache Kafka through Strimzi | Apache-2.0 | [source](https://github.com/apache/kafka/blob/trunk/LICENSE) |
-| Kubernetes | Kubernetes control plane and add-ons | Apache-2.0 | [source](https://github.com/kubernetes/kubernetes/blob/master/LICENSE) |
-| MariaDB | MariaDB Server | GPL-2.0 | [source](https://github.com/MariaDB/server/blob/main/COPYING) |
-| MongoDB | Percona Server for MongoDB | SSPL-1.0 | [source](https://github.com/percona/percona-server-mongodb/blob/master/LICENSE-Community.txt) |
-| NATS | NATS Server | Apache-2.0 | [source](https://github.com/nats-io/nats-server/blob/main/LICENSE) |
-| OpenBao | OpenBao | MPL-2.0 | [source](https://github.com/openbao/openbao/blob/main/LICENSE) |
-| OpenSearch | OpenSearch | Apache-2.0 | [source](https://github.com/opensearch-project/OpenSearch/blob/main/LICENSE.txt) |
-| PostgreSQL | PostgreSQL | PostgreSQL License | [source](https://www.postgresql.org/about/licence/) |
-| Qdrant | Qdrant | Apache-2.0 | [source](https://github.com/qdrant/qdrant/blob/master/LICENSE) |
-| RabbitMQ | RabbitMQ Server | MPL-2.0; Apache-2.0 for some files | [source](https://github.com/rabbitmq/rabbitmq-server/blob/main/LICENSE) |
-| Redis | Redis 7.4 and Redis 8 | RSALv2 or SSPLv1; Redis 8 also AGPLv3 | [source](https://redis.io/legal/licenses/) |
-| TCP Balancer | HAProxy | GPL-2.0 with exceptions | [source](https://github.com/haproxy/haproxy/blob/master/LICENSE) |
-| VPN | Outline Shadowsocks server | Apache-2.0 | [source](https://github.com/OutlineFoundation/outline-server/blob/master/LICENSE) |
diff --git a/content/en/docs/next/operations/configuration/licenses.md b/content/en/docs/next/operations/configuration/licenses.md
index cc2bc9f9..761c73be 100644
--- a/content/en/docs/next/operations/configuration/licenses.md
+++ b/content/en/docs/next/operations/configuration/licenses.md
@@ -1,8 +1,132 @@
---
title: "Licenses"
linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
+description: "Licenses of open-source components packaged with Cozystack."
+weight: 35
---
-{{< include "docs/_include/licenses.md" >}}
+This page lists the open-source components Cozystack ships, grouped by their role in the platform.
+Cozystack-maintained charts, CRDs, controllers, and application APIs are licensed under **Apache-2.0** and are not listed individually below.
+For each upstream component, the card links to the upstream license file.
+
+{{% alert color="info" %}}
+This reference is hand-curated against the current `next` set of components.
+Container images can include additional operating-system packages and library dependencies with their own licenses.
+Pinned upstream versions of managed runtimes (PostgreSQL, MariaDB, Kafka, etc.) may change between Cozystack minor releases — check the version of Cozystack you run.
+{{% /alert %}}
+
+## Operating system and Kubernetes runtime
+
+{{< oss-cards >}}
+{{< oss-card name="Talos Linux" license="MPL-2.0" source="https://github.com/siderolabs/talos/blob/main/LICENSE" description="Immutable Linux distribution built for Kubernetes nodes." >}}
+{{< oss-card name="Kubernetes" license="Apache-2.0" source="https://github.com/kubernetes/kubernetes/blob/master/LICENSE" description="Container orchestration kernel used for both the management cluster and tenant clusters." >}}
+{{< oss-card name="Kamaji" license="Apache-2.0" source="https://github.com/clastix/kamaji/blob/master/LICENSE" description="Hosted control planes for tenant Kubernetes clusters." >}}
+{{< oss-card name="Cluster API" license="Apache-2.0" source="https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE" description="Declarative provisioning of tenant Kubernetes clusters (core, operator, and Kamaji/KubeVirt providers)." >}}
+{{< oss-card name="KubeVirt" license="Apache-2.0" source="https://github.com/kubevirt/kubevirt/blob/main/LICENSE" description="Virtual machines as Kubernetes-native workloads (core, CDI, CSI, and instancetypes)." >}}
+{{< /oss-cards >}}
+
+## Networking
+
+{{< oss-cards >}}
+{{< oss-card name="Cilium" license="Apache-2.0" source="https://github.com/cilium/cilium/blob/main/LICENSE" description="eBPF-based CNI for pod networking and NetworkPolicy." >}}
+{{< oss-card name="Kube-OVN" license="Apache-2.0" source="https://github.com/cozystack/kubeovn-chart/blob/main/LICENSE" description="OVN-based virtual networking, used for VPC and floating IPs." >}}
+{{< oss-card name="Multus CNI" license="Apache-2.0" source="https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/LICENSE" description="Multiple network interfaces per pod." >}}
+{{< oss-card name="MetalLB" license="Apache-2.0" source="https://github.com/metallb/metallb/blob/main/LICENSE" description="Bare-metal load balancer for Kubernetes Services." >}}
+{{< oss-card name="ingress-nginx" license="Apache-2.0" source="https://github.com/kubernetes/ingress-nginx/blob/main/LICENSE" description="HTTP ingress controller." >}}
+{{< oss-card name="Gateway API CRDs" license="Apache-2.0" source="https://github.com/kubernetes-sigs/gateway-api/blob/main/LICENSE" description="Standard Kubernetes Gateway API definitions." >}}
+{{< oss-card name="CoreDNS" license="Apache-2.0" source="https://github.com/coredns/coredns/blob/master/LICENSE" description="Cluster DNS server." >}}
+{{< oss-card name="ExternalDNS" license="Apache-2.0" source="https://github.com/kubernetes-sigs/external-dns/blob/master/LICENSE.md" description="Sync Kubernetes resources to external DNS providers." >}}
+{{< oss-card name="Kilo" license="Apache-2.0" source="https://github.com/squat/kilo/blob/main/LICENSE" description="Mesh networking across geographically distributed nodes." >}}
+{{< oss-card name="Hetzner RobotLB" license="MIT" source="https://github.com/Intreecom/robotlb/blob/master/LICENSE" description="Load balancer integration for Hetzner dedicated hardware." >}}
+{{< /oss-cards >}}
+
+## Storage
+
+{{< oss-cards >}}
+{{< oss-card name="LINSTOR / Piraeus" license="GPL-3.0; Apache-2.0" source="https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE" description="DRBD-based replicated block storage (LINSTOR server, CSI, scheduler extender, GUI, Piraeus operator)." >}}
+{{< oss-card name="SeaweedFS" license="Apache-2.0" source="https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE" description="Distributed object storage; backs the managed Bucket service." >}}
+{{< oss-card name="CSI Driver NFS" license="Apache-2.0" source="https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/LICENSE" description="NFS CSI driver." >}}
+{{< oss-card name="CSI Snapshot Controller" license="Apache-2.0" source="https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE" description="External snapshotter and VolumeSnapshot CRDs." >}}
+{{< oss-card name="Velero" license="Apache-2.0" source="https://github.com/velero-io/velero/blob/main/LICENSE" description="Cluster and persistent volume backups." >}}
+{{< oss-card name="Container Object Storage Interface" license="Apache-2.0" source="https://github.com/kubernetes-sigs/container-object-storage-interface/blob/main/LICENSE" description="COSI controller for managed object storage." >}}
+{{< oss-card name="S3 Manager" license="Apache-2.0" source="https://github.com/cloudlena/s3manager/blob/main/LICENSE" description="Web UI for S3-compatible buckets." >}}
+{{< /oss-cards >}}
+
+## Observability
+
+{{< oss-cards >}}
+{{< oss-card name="VictoriaMetrics Operator" license="Apache-2.0" source="https://github.com/VictoriaMetrics/operator/blob/master/LICENSE" description="Metrics storage, ingestion, and Prometheus-compatible query layer." >}}
+{{< oss-card name="Grafana Operator" license="Apache-2.0" source="https://github.com/grafana/grafana-operator/blob/master/LICENSE" description="Manages Grafana instances, dashboards, and datasources." >}}
+{{< oss-card name="Fluent Bit" license="Apache-2.0" source="https://github.com/fluent/fluent-bit/blob/master/LICENSE" description="Log forwarder running on every node." >}}
+{{< oss-card name="kube-state-metrics" license="Apache-2.0" source="https://github.com/kubernetes/kube-state-metrics/blob/main/LICENSE" description="Exposes Kubernetes object state as metrics." >}}
+{{< oss-card name="node-exporter" license="Apache-2.0" source="https://github.com/prometheus/node_exporter/blob/master/LICENSE" description="System and hardware metrics from each node." >}}
+{{< oss-card name="Prometheus Operator CRDs" license="Apache-2.0" source="https://github.com/prometheus-community/helm-charts/blob/main/LICENSE" description="CRDs for Prometheus-style monitoring resources, consumed by VictoriaMetrics." >}}
+{{< oss-card name="Metrics Server" license="Apache-2.0" source="https://github.com/kubernetes-sigs/metrics-server/blob/master/LICENSE" description="Kubelet metrics for HPA and `kubectl top`." >}}
+{{< oss-card name="OpenCost" license="Apache-2.0" source="https://github.com/opencost/opencost-helm-chart/blob/main/LICENSE" description="Real-time cost monitoring for Kubernetes workloads." >}}
+{{< oss-card name="Goldpinger" license="Apache-2.0" source="https://github.com/bloomberg/goldpinger/blob/master/LICENSE" description="Pod-to-pod connectivity checks across the cluster." >}}
+{{< /oss-cards >}}
+
+## Autoscaling and resource management
+
+{{< oss-cards >}}
+{{< oss-card name="Vertical Pod Autoscaler" license="Apache-2.0" source="https://github.com/kubernetes/autoscaler/blob/master/LICENSE" description="Vertical resource right-sizing for pods (chart: MIT)." >}}
+{{< oss-card name="Cluster Autoscaler" license="Apache-2.0" source="https://github.com/kubernetes/autoscaler/blob/master/LICENSE" description="Horizontal scaling of node pools." >}}
+{{< oss-card name="Stakater Reloader" license="Apache-2.0" source="https://github.com/stakater/Reloader/blob/master/LICENSE" description="Restarts pods when their ConfigMaps or Secrets change." >}}
+{{< /oss-cards >}}
+
+## GPU and accelerators
+
+{{< oss-cards >}}
+{{< oss-card name="NVIDIA GPU Operator" license="Apache-2.0" source="https://github.com/NVIDIA/gpu-operator/blob/main/LICENSE" description="Driver, container runtime, and device-plugin lifecycle for NVIDIA GPUs." >}}
+{{< oss-card name="HAMi" license="Apache-2.0" source="https://github.com/Project-HAMi/HAMi/blob/master/LICENSE" description="GPU sharing and fractional GPU scheduling." >}}
+{{< /oss-cards >}}
+
+## GitOps and platform automation
+
+{{< oss-cards >}}
+{{< oss-card name="Flux" license="Apache-2.0; AGPL-3.0" source="https://github.com/fluxcd/flux2/blob/main/LICENSE" description="GitOps engine. ControlPlane Flux Operator and instance chart are AGPL-3.0; upstream Flux controllers are Apache-2.0." >}}
+{{< oss-card name="Aenix etcd Operator" license="Apache-2.0" source="https://github.com/aenix-io/etcd-operator/blob/main/LICENSE" description="Manages etcd clusters used by tenant Kamaji control planes." >}}
+{{< oss-card name="cert-manager" license="Apache-2.0" source="https://github.com/cert-manager/cert-manager/blob/master/LICENSE" description="Automated TLS certificate issuance and rotation." >}}
+{{< oss-card name="External Secrets Operator" license="Apache-2.0" source="https://github.com/external-secrets/external-secrets/blob/main/LICENSE" description="Sync secrets from external KMS into Kubernetes." >}}
+{{< oss-card name="SAP ClusterSecret Operator" license="Apache-2.0" source="https://github.com/SAP/clustersecret-operator/blob/main/LICENSE" description="Replicate secrets across namespaces." >}}
+{{< oss-card name="Tinkerbell Smee" license="Apache-2.0" source="https://github.com/tinkerbell/smee/blob/main/LICENSE" description="iPXE / DHCP boot server for bare-metal provisioning." >}}
+{{< oss-card name="Telepresence" license="Apache-2.0" source="https://github.com/telepresenceio/telepresence/blob/release/v2/LICENSE" description="Local development against a remote cluster (Traffic Manager)." >}}
+{{< /oss-cards >}}
+
+## Identity, registry, and admin UI
+
+{{< oss-cards >}}
+{{< oss-card name="Keycloak" license="Apache-2.0" source="https://github.com/keycloak/keycloak/blob/main/LICENSE.txt" description="OIDC provider for platform and tenant SSO; deployed with the KubeRocketCI Keycloak Operator." >}}
+{{< oss-card name="Harbor" license="Apache-2.0" source="https://github.com/goharbor/harbor/blob/main/LICENSE" description="OCI registry for container images and Helm charts." >}}
+{{< /oss-cards >}}
+
+## Managed database runtimes
+
+{{< oss-cards >}}
+{{< oss-card name="PostgreSQL" license="PostgreSQL License" source="https://www.postgresql.org/about/licence/" description="Managed via CloudNativePG operator (Apache-2.0)." >}}
+{{< oss-card name="MariaDB Server" license="GPL-2.0" source="https://github.com/MariaDB/server/blob/main/COPYING" description="Managed via mariadb-operator (MIT)." >}}
+{{< oss-card name="MongoDB (Percona Server)" license="SSPL-1.0" source="https://github.com/percona/percona-server-mongodb/blob/master/LICENSE-Community.txt" description="Managed via Percona Operator for MongoDB (Apache-2.0)." >}}
+{{< oss-card name="ClickHouse" license="Apache-2.0" source="https://github.com/ClickHouse/ClickHouse/blob/master/LICENSE" description="Server and Keeper, managed via Altinity ClickHouse Operator (Apache-2.0)." >}}
+{{< oss-card name="OpenSearch" license="Apache-2.0" source="https://github.com/opensearch-project/OpenSearch/blob/main/LICENSE.txt" description="Managed via opensearch-k8s-operator (Apache-2.0)." >}}
+{{< oss-card name="Qdrant" license="Apache-2.0" source="https://github.com/qdrant/qdrant/blob/master/LICENSE" description="Vector database, deployed via the upstream Qdrant Helm chart." >}}
+{{< oss-card name="FoundationDB" license="Apache-2.0" source="https://github.com/apple/foundationdb/blob/main/LICENSE" description="Managed via FoundationDB Kubernetes Operator (Apache-2.0)." >}}
+{{< oss-card name="Redis" license="RSALv2 or SSPLv1 (7.x) / AGPLv3 (8.x)" source="https://redis.io/legal/licenses/" description="Managed via Spotahome Redis Operator (Apache-2.0). Cozystack supports Redis 7.4 and Redis 8." >}}
+{{< /oss-cards >}}
+
+## Managed messaging and caching runtimes
+
+{{< oss-cards >}}
+{{< oss-card name="Apache Kafka" license="Apache-2.0" source="https://github.com/apache/kafka/blob/trunk/LICENSE" description="Managed via Strimzi Kafka Operator (Apache-2.0)." >}}
+{{< oss-card name="NATS" license="Apache-2.0" source="https://github.com/nats-io/nats-server/blob/main/LICENSE" description="Lightweight messaging server, deployed via the upstream NATS Helm chart." >}}
+{{< oss-card name="RabbitMQ" license="MPL-2.0; Apache-2.0 for some files" source="https://github.com/rabbitmq/rabbitmq-server/blob/main/LICENSE" description="Managed via RabbitMQ Cluster Operator (MPL-2.0)." >}}
+{{< oss-card name="OpenBao" license="MPL-2.0" source="https://github.com/openbao/openbao/blob/main/LICENSE" description="Secrets management fork of HashiCorp Vault, deployed via the upstream OpenBao Helm chart." >}}
+{{< /oss-cards >}}
+
+## Managed networking services
+
+{{< oss-cards >}}
+{{< oss-card name="NGINX" license="BSD-2-Clause" source="https://github.com/nginx/nginx/blob/master/LICENSE" description="Used by the managed HTTP Cache service." >}}
+{{< oss-card name="HAProxy" license="GPL-2.0 with exceptions" source="https://github.com/haproxy/haproxy/blob/master/LICENSE" description="Used by the managed TCP Balancer and HTTP Cache services." >}}
+{{< oss-card name="IP2Location modules" license="MIT" source="https://github.com/ip2location/ip2location-nginx/blob/master/LICENSE" description="GeoIP modules bundled into the HTTP Cache (IP2Location and IP2Proxy)." >}}
+{{< oss-card name="Outline Server (Shadowsocks)" license="Apache-2.0" source="https://github.com/OutlineFoundation/outline-server/blob/master/LICENSE" description="Backs the managed VPN service." >}}
+{{< /oss-cards >}}
diff --git a/content/en/docs/v0/operations/configuration/licenses.md b/content/en/docs/v0/operations/configuration/licenses.md
deleted file mode 100644
index cc2bc9f9..00000000
--- a/content/en/docs/v0/operations/configuration/licenses.md
+++ /dev/null
@@ -1,8 +0,0 @@
----
-title: "Licenses"
-linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
----
-
-{{< include "docs/_include/licenses.md" >}}
diff --git a/content/en/docs/v1.0/operations/configuration/licenses.md b/content/en/docs/v1.0/operations/configuration/licenses.md
deleted file mode 100644
index cc2bc9f9..00000000
--- a/content/en/docs/v1.0/operations/configuration/licenses.md
+++ /dev/null
@@ -1,8 +0,0 @@
----
-title: "Licenses"
-linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
----
-
-{{< include "docs/_include/licenses.md" >}}
diff --git a/content/en/docs/v1.1/operations/configuration/licenses.md b/content/en/docs/v1.1/operations/configuration/licenses.md
deleted file mode 100644
index cc2bc9f9..00000000
--- a/content/en/docs/v1.1/operations/configuration/licenses.md
+++ /dev/null
@@ -1,8 +0,0 @@
----
-title: "Licenses"
-linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
----
-
-{{< include "docs/_include/licenses.md" >}}
diff --git a/content/en/docs/v1.2/operations/configuration/licenses.md b/content/en/docs/v1.2/operations/configuration/licenses.md
deleted file mode 100644
index cc2bc9f9..00000000
--- a/content/en/docs/v1.2/operations/configuration/licenses.md
+++ /dev/null
@@ -1,8 +0,0 @@
----
-title: "Licenses"
-linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
----
-
-{{< include "docs/_include/licenses.md" >}}
diff --git a/content/en/docs/v1.3/operations/configuration/licenses.md b/content/en/docs/v1.3/operations/configuration/licenses.md
index cc2bc9f9..761c73be 100644
--- a/content/en/docs/v1.3/operations/configuration/licenses.md
+++ b/content/en/docs/v1.3/operations/configuration/licenses.md
@@ -1,8 +1,132 @@
---
title: "Licenses"
linkTitle: "Licenses"
-description: "License reference for Cozystack platform components."
-weight: 40
+description: "Licenses of open-source components packaged with Cozystack."
+weight: 35
---
-{{< include "docs/_include/licenses.md" >}}
+This page lists the open-source components Cozystack ships, grouped by their role in the platform.
+Cozystack-maintained charts, CRDs, controllers, and application APIs are licensed under **Apache-2.0** and are not listed individually below.
+For each upstream component, the card links to the upstream license file.
+
+{{% alert color="info" %}}
+This reference is hand-curated against the current `next` set of components.
+Container images can include additional operating-system packages and library dependencies with their own licenses.
+Pinned upstream versions of managed runtimes (PostgreSQL, MariaDB, Kafka, etc.) may change between Cozystack minor releases — check the version of Cozystack you run.
+{{% /alert %}}
+
+## Operating system and Kubernetes runtime
+
+{{< oss-cards >}}
+{{< oss-card name="Talos Linux" license="MPL-2.0" source="https://github.com/siderolabs/talos/blob/main/LICENSE" description="Immutable Linux distribution built for Kubernetes nodes." >}}
+{{< oss-card name="Kubernetes" license="Apache-2.0" source="https://github.com/kubernetes/kubernetes/blob/master/LICENSE" description="Container orchestration kernel used for both the management cluster and tenant clusters." >}}
+{{< oss-card name="Kamaji" license="Apache-2.0" source="https://github.com/clastix/kamaji/blob/master/LICENSE" description="Hosted control planes for tenant Kubernetes clusters." >}}
+{{< oss-card name="Cluster API" license="Apache-2.0" source="https://github.com/kubernetes-sigs/cluster-api/blob/main/LICENSE" description="Declarative provisioning of tenant Kubernetes clusters (core, operator, and Kamaji/KubeVirt providers)." >}}
+{{< oss-card name="KubeVirt" license="Apache-2.0" source="https://github.com/kubevirt/kubevirt/blob/main/LICENSE" description="Virtual machines as Kubernetes-native workloads (core, CDI, CSI, and instancetypes)." >}}
+{{< /oss-cards >}}
+
+## Networking
+
+{{< oss-cards >}}
+{{< oss-card name="Cilium" license="Apache-2.0" source="https://github.com/cilium/cilium/blob/main/LICENSE" description="eBPF-based CNI for pod networking and NetworkPolicy." >}}
+{{< oss-card name="Kube-OVN" license="Apache-2.0" source="https://github.com/cozystack/kubeovn-chart/blob/main/LICENSE" description="OVN-based virtual networking, used for VPC and floating IPs." >}}
+{{< oss-card name="Multus CNI" license="Apache-2.0" source="https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/LICENSE" description="Multiple network interfaces per pod." >}}
+{{< oss-card name="MetalLB" license="Apache-2.0" source="https://github.com/metallb/metallb/blob/main/LICENSE" description="Bare-metal load balancer for Kubernetes Services." >}}
+{{< oss-card name="ingress-nginx" license="Apache-2.0" source="https://github.com/kubernetes/ingress-nginx/blob/main/LICENSE" description="HTTP ingress controller." >}}
+{{< oss-card name="Gateway API CRDs" license="Apache-2.0" source="https://github.com/kubernetes-sigs/gateway-api/blob/main/LICENSE" description="Standard Kubernetes Gateway API definitions." >}}
+{{< oss-card name="CoreDNS" license="Apache-2.0" source="https://github.com/coredns/coredns/blob/master/LICENSE" description="Cluster DNS server." >}}
+{{< oss-card name="ExternalDNS" license="Apache-2.0" source="https://github.com/kubernetes-sigs/external-dns/blob/master/LICENSE.md" description="Sync Kubernetes resources to external DNS providers." >}}
+{{< oss-card name="Kilo" license="Apache-2.0" source="https://github.com/squat/kilo/blob/main/LICENSE" description="Mesh networking across geographically distributed nodes." >}}
+{{< oss-card name="Hetzner RobotLB" license="MIT" source="https://github.com/Intreecom/robotlb/blob/master/LICENSE" description="Load balancer integration for Hetzner dedicated hardware." >}}
+{{< /oss-cards >}}
+
+## Storage
+
+{{< oss-cards >}}
+{{< oss-card name="LINSTOR / Piraeus" license="GPL-3.0; Apache-2.0" source="https://github.com/piraeusdatastore/piraeus-operator/blob/v2/LICENSE" description="DRBD-based replicated block storage (LINSTOR server, CSI, scheduler extender, GUI, Piraeus operator)." >}}
+{{< oss-card name="SeaweedFS" license="Apache-2.0" source="https://github.com/seaweedfs/seaweedfs/blob/master/LICENSE" description="Distributed object storage; backs the managed Bucket service." >}}
+{{< oss-card name="CSI Driver NFS" license="Apache-2.0" source="https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/LICENSE" description="NFS CSI driver." >}}
+{{< oss-card name="CSI Snapshot Controller" license="Apache-2.0" source="https://github.com/kubernetes-csi/external-snapshotter/blob/master/LICENSE" description="External snapshotter and VolumeSnapshot CRDs." >}}
+{{< oss-card name="Velero" license="Apache-2.0" source="https://github.com/velero-io/velero/blob/main/LICENSE" description="Cluster and persistent volume backups." >}}
+{{< oss-card name="Container Object Storage Interface" license="Apache-2.0" source="https://github.com/kubernetes-sigs/container-object-storage-interface/blob/main/LICENSE" description="COSI controller for managed object storage." >}}
+{{< oss-card name="S3 Manager" license="Apache-2.0" source="https://github.com/cloudlena/s3manager/blob/main/LICENSE" description="Web UI for S3-compatible buckets." >}}
+{{< /oss-cards >}}
+
+## Observability
+
+{{< oss-cards >}}
+{{< oss-card name="VictoriaMetrics Operator" license="Apache-2.0" source="https://github.com/VictoriaMetrics/operator/blob/master/LICENSE" description="Metrics storage, ingestion, and Prometheus-compatible query layer." >}}
+{{< oss-card name="Grafana Operator" license="Apache-2.0" source="https://github.com/grafana/grafana-operator/blob/master/LICENSE" description="Manages Grafana instances, dashboards, and datasources." >}}
+{{< oss-card name="Fluent Bit" license="Apache-2.0" source="https://github.com/fluent/fluent-bit/blob/master/LICENSE" description="Log forwarder running on every node." >}}
+{{< oss-card name="kube-state-metrics" license="Apache-2.0" source="https://github.com/kubernetes/kube-state-metrics/blob/main/LICENSE" description="Exposes Kubernetes object state as metrics." >}}
+{{< oss-card name="node-exporter" license="Apache-2.0" source="https://github.com/prometheus/node_exporter/blob/master/LICENSE" description="System and hardware metrics from each node." >}}
+{{< oss-card name="Prometheus Operator CRDs" license="Apache-2.0" source="https://github.com/prometheus-community/helm-charts/blob/main/LICENSE" description="CRDs for Prometheus-style monitoring resources, consumed by VictoriaMetrics." >}}
+{{< oss-card name="Metrics Server" license="Apache-2.0" source="https://github.com/kubernetes-sigs/metrics-server/blob/master/LICENSE" description="Kubelet metrics for HPA and `kubectl top`." >}}
+{{< oss-card name="OpenCost" license="Apache-2.0" source="https://github.com/opencost/opencost-helm-chart/blob/main/LICENSE" description="Real-time cost monitoring for Kubernetes workloads." >}}
+{{< oss-card name="Goldpinger" license="Apache-2.0" source="https://github.com/bloomberg/goldpinger/blob/master/LICENSE" description="Pod-to-pod connectivity checks across the cluster." >}}
+{{< /oss-cards >}}
+
+## Autoscaling and resource management
+
+{{< oss-cards >}}
+{{< oss-card name="Vertical Pod Autoscaler" license="Apache-2.0" source="https://github.com/kubernetes/autoscaler/blob/master/LICENSE" description="Vertical resource right-sizing for pods (chart: MIT)." >}}
+{{< oss-card name="Cluster Autoscaler" license="Apache-2.0" source="https://github.com/kubernetes/autoscaler/blob/master/LICENSE" description="Horizontal scaling of node pools." >}}
+{{< oss-card name="Stakater Reloader" license="Apache-2.0" source="https://github.com/stakater/Reloader/blob/master/LICENSE" description="Restarts pods when their ConfigMaps or Secrets change." >}}
+{{< /oss-cards >}}
+
+## GPU and accelerators
+
+{{< oss-cards >}}
+{{< oss-card name="NVIDIA GPU Operator" license="Apache-2.0" source="https://github.com/NVIDIA/gpu-operator/blob/main/LICENSE" description="Driver, container runtime, and device-plugin lifecycle for NVIDIA GPUs." >}}
+{{< oss-card name="HAMi" license="Apache-2.0" source="https://github.com/Project-HAMi/HAMi/blob/master/LICENSE" description="GPU sharing and fractional GPU scheduling." >}}
+{{< /oss-cards >}}
+
+## GitOps and platform automation
+
+{{< oss-cards >}}
+{{< oss-card name="Flux" license="Apache-2.0; AGPL-3.0" source="https://github.com/fluxcd/flux2/blob/main/LICENSE" description="GitOps engine. ControlPlane Flux Operator and instance chart are AGPL-3.0; upstream Flux controllers are Apache-2.0." >}}
+{{< oss-card name="Aenix etcd Operator" license="Apache-2.0" source="https://github.com/aenix-io/etcd-operator/blob/main/LICENSE" description="Manages etcd clusters used by tenant Kamaji control planes." >}}
+{{< oss-card name="cert-manager" license="Apache-2.0" source="https://github.com/cert-manager/cert-manager/blob/master/LICENSE" description="Automated TLS certificate issuance and rotation." >}}
+{{< oss-card name="External Secrets Operator" license="Apache-2.0" source="https://github.com/external-secrets/external-secrets/blob/main/LICENSE" description="Sync secrets from external KMS into Kubernetes." >}}
+{{< oss-card name="SAP ClusterSecret Operator" license="Apache-2.0" source="https://github.com/SAP/clustersecret-operator/blob/main/LICENSE" description="Replicate secrets across namespaces." >}}
+{{< oss-card name="Tinkerbell Smee" license="Apache-2.0" source="https://github.com/tinkerbell/smee/blob/main/LICENSE" description="iPXE / DHCP boot server for bare-metal provisioning." >}}
+{{< oss-card name="Telepresence" license="Apache-2.0" source="https://github.com/telepresenceio/telepresence/blob/release/v2/LICENSE" description="Local development against a remote cluster (Traffic Manager)." >}}
+{{< /oss-cards >}}
+
+## Identity, registry, and admin UI
+
+{{< oss-cards >}}
+{{< oss-card name="Keycloak" license="Apache-2.0" source="https://github.com/keycloak/keycloak/blob/main/LICENSE.txt" description="OIDC provider for platform and tenant SSO; deployed with the KubeRocketCI Keycloak Operator." >}}
+{{< oss-card name="Harbor" license="Apache-2.0" source="https://github.com/goharbor/harbor/blob/main/LICENSE" description="OCI registry for container images and Helm charts." >}}
+{{< /oss-cards >}}
+
+## Managed database runtimes
+
+{{< oss-cards >}}
+{{< oss-card name="PostgreSQL" license="PostgreSQL License" source="https://www.postgresql.org/about/licence/" description="Managed via CloudNativePG operator (Apache-2.0)." >}}
+{{< oss-card name="MariaDB Server" license="GPL-2.0" source="https://github.com/MariaDB/server/blob/main/COPYING" description="Managed via mariadb-operator (MIT)." >}}
+{{< oss-card name="MongoDB (Percona Server)" license="SSPL-1.0" source="https://github.com/percona/percona-server-mongodb/blob/master/LICENSE-Community.txt" description="Managed via Percona Operator for MongoDB (Apache-2.0)." >}}
+{{< oss-card name="ClickHouse" license="Apache-2.0" source="https://github.com/ClickHouse/ClickHouse/blob/master/LICENSE" description="Server and Keeper, managed via Altinity ClickHouse Operator (Apache-2.0)." >}}
+{{< oss-card name="OpenSearch" license="Apache-2.0" source="https://github.com/opensearch-project/OpenSearch/blob/main/LICENSE.txt" description="Managed via opensearch-k8s-operator (Apache-2.0)." >}}
+{{< oss-card name="Qdrant" license="Apache-2.0" source="https://github.com/qdrant/qdrant/blob/master/LICENSE" description="Vector database, deployed via the upstream Qdrant Helm chart." >}}
+{{< oss-card name="FoundationDB" license="Apache-2.0" source="https://github.com/apple/foundationdb/blob/main/LICENSE" description="Managed via FoundationDB Kubernetes Operator (Apache-2.0)." >}}
+{{< oss-card name="Redis" license="RSALv2 or SSPLv1 (7.x) / AGPLv3 (8.x)" source="https://redis.io/legal/licenses/" description="Managed via Spotahome Redis Operator (Apache-2.0). Cozystack supports Redis 7.4 and Redis 8." >}}
+{{< /oss-cards >}}
+
+## Managed messaging and caching runtimes
+
+{{< oss-cards >}}
+{{< oss-card name="Apache Kafka" license="Apache-2.0" source="https://github.com/apache/kafka/blob/trunk/LICENSE" description="Managed via Strimzi Kafka Operator (Apache-2.0)." >}}
+{{< oss-card name="NATS" license="Apache-2.0" source="https://github.com/nats-io/nats-server/blob/main/LICENSE" description="Lightweight messaging server, deployed via the upstream NATS Helm chart." >}}
+{{< oss-card name="RabbitMQ" license="MPL-2.0; Apache-2.0 for some files" source="https://github.com/rabbitmq/rabbitmq-server/blob/main/LICENSE" description="Managed via RabbitMQ Cluster Operator (MPL-2.0)." >}}
+{{< oss-card name="OpenBao" license="MPL-2.0" source="https://github.com/openbao/openbao/blob/main/LICENSE" description="Secrets management fork of HashiCorp Vault, deployed via the upstream OpenBao Helm chart." >}}
+{{< /oss-cards >}}
+
+## Managed networking services
+
+{{< oss-cards >}}
+{{< oss-card name="NGINX" license="BSD-2-Clause" source="https://github.com/nginx/nginx/blob/master/LICENSE" description="Used by the managed HTTP Cache service." >}}
+{{< oss-card name="HAProxy" license="GPL-2.0 with exceptions" source="https://github.com/haproxy/haproxy/blob/master/LICENSE" description="Used by the managed TCP Balancer and HTTP Cache services." >}}
+{{< oss-card name="IP2Location modules" license="MIT" source="https://github.com/ip2location/ip2location-nginx/blob/master/LICENSE" description="GeoIP modules bundled into the HTTP Cache (IP2Location and IP2Proxy)." >}}
+{{< oss-card name="Outline Server (Shadowsocks)" license="Apache-2.0" source="https://github.com/OutlineFoundation/outline-server/blob/master/LICENSE" description="Backs the managed VPN service." >}}
+{{< /oss-cards >}}
diff --git a/layouts/shortcodes/oss-card.html b/layouts/shortcodes/oss-card.html
new file mode 100644
index 00000000..fca6983f
--- /dev/null
+++ b/layouts/shortcodes/oss-card.html
@@ -0,0 +1,46 @@
+{{- /*
+ oss-card: single OSS component card.
+
+ Parameters (named):
+ name — display name of the component (required)
+ license — SPDX license identifier or short label (required)
+ source — URL to the upstream LICENSE file or repository (required)
+ description — short one-line description (optional)
+ version — pinned/upstream version label (optional)
+ logo — basename under /img/logos/components/ {{ . }} 3k~5EN4M`})#|ZLa! AM)zy`=xl-gvN|}r
zJ2Yt;DjMQAJp#0CgHY~}mtgbGTiaD}8=wR^w|k+>vk03nF|i>x8zp!po5FYNknVm}
z(~5{JN~c~=30^V-RJhQRx8|8`6*z2#C1W*~c?`@*r2MTOYEW9$OgOZ5Se8rBGQk
zZB`w0Rz0(iM1?mUMA2ZEJr-?EeqA|&p(<@ZFOc>`KWK}OwsGw1?
+ {{- else -}}
+
+ {{- end -}}
+
28gD?Lq-VvIQ<}i{l
zfUYSRIAI!z@R}8(eu;^@@bf1P9t|YD_2+{MSQ*Z#D_vnzBY#iPn^oRp60;7CzlZ3jWF{`To^DBP>+ZIjXFi9Q^j
z8rv)IC{1i(T-P%gK&q|JIT^Nm;M(!@N$IL6GYDK^Igy?SKA-xT;h@gte!%>9-y