Repositories list

• jetstack-secure

  Public
  Open-source components of Jetstack Secure.

  Go

  •

  Apache License 2.0

  •25•259•12•11•Updated Sep 16, 2025Sep 16, 2025

• paranoia

  Public
  Inspect certificate authorities in container images

  containerscertificate-authoritycontainer-security+ 2tlssecurity

  Go

  •

  Apache License 2.0

  •9•236•7•9•Updated Sep 15, 2025Sep 15, 2025

• finops-stack

  Public
  kubernetescloudhelm+ 2cost-optimizationfinops

  Go

  •

  Apache License 2.0

  •1•13•0•2•Updated Sep 8, 2025Sep 8, 2025

• terraform-provider-tlspc

  Public
  Terraform Provider for the Venafi TLS Protect Cloud Platform

  terraformterraform-providervenafi+ 1venafi-cloud

  Go

  •

  Mozilla Public License 2.0

  •0•2•15•1•Updated Aug 28, 2025Aug 28, 2025

• version-checker

  Public
  Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.

  godockerkubernetes+ 9utilityimagegrafanaprometheusquayversiongcr+ 2

  Go

  •

  Apache License 2.0

  •83•751•29•5•Updated Aug 7, 2025Aug 7, 2025

• certified-operators

  Public
  Production catalog for Red Hat Certified Operator Bundles

  Dockerfile

  •

  Apache License 2.0

  •531•0•0•0•Updated Jul 22, 2025Jul 22, 2025

• jetstack-secure-gcm

  Public
  Contains configuration and user guide for the Jetstack Secure for cert-manager offering on the Google Cloud Marketplace.

  jetstack-securecert-managergoogle-cloud-marketplace

  Mustache

  •2•1•9•2•Updated Jul 2, 2025Jul 2, 2025

• homebrew-jetstack

  Public
  Homebrew tap for Jetstack tools

  Ruby

  •0•0•1•0•Updated Apr 15, 2025Apr 15, 2025

• fleetops-gke-ambient

  Public
  Makefile

  •

  Apache License 2.0

  •0•0•0•0•Updated Sep 10, 2024Sep 10, 2024

• kube-oidc-proxy

  Public archive
  Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.

  Go

  •

  Apache License 2.0

  •100•476•27•8•Updated Aug 10, 2024Aug 10, 2024

• dependency-track-exporter

  Public
  Go

  •

  Apache License 2.0

  •8•25•4•11•Updated Aug 3, 2024Aug 3, 2024

• envoy-workload-identity

  Public
  Example of no-code GCP Workload Identity using Envoy Proxy

  Python

  •0•0•0•0•Updated Jun 24, 2024Jun 24, 2024

• seaglass

  Public
  Go

  •

  Other

  •0•3•2•0•Updated Apr 28, 2024Apr 28, 2024

• gke-simple-custom-ingress

  Public
  Designed to be used alongside the blog

  HCL

  •

  Apache License 2.0

  •0•0•0•0•Updated Apr 23, 2024Apr 23, 2024

• jwt-registry-auth

  Public
  Go

  •

  Apache License 2.0

  •0•3•0•0•Updated Nov 21, 2023Nov 21, 2023

• tally

  Public
  Go

  •

  Apache License 2.0

  •0•14•7•9•Updated Nov 13, 2023Nov 13, 2023

• jsctl

  Public archive
  CLI tool for Jetstack Secure

  Go

  •

  Apache License 2.0

  •4•2•8•4•Updated Sep 18, 2023Sep 18, 2023

• spire-keymanager-test

  Public
  basic keymanager to test functionality of it with SPIRE

  Go

  •0•0•0•0•Updated Jun 29, 2023Jun 29, 2023

• vcert

  Public
  Go client SDK and command line utility designed to simplify integrations by automating key generation and certificate enrollment using Venafi machine identity services.

  Go

  •

  Apache License 2.0

  •66•1•0•1•Updated Jun 6, 2023Jun 6, 2023

• binpak

  Public archive
  A new way of visualising kubernetes workloads.

  TypeScript

  •

  Apache License 2.0

  •0•0•3•0•Updated Oct 25, 2022Oct 25, 2022

• spiffe-workload-identity-demo

  Public
  Demo of using cert-manager SPIFFE for for workload identity

  Go

  •

  Apache License 2.0

  •0•5•0•0•Updated Aug 4, 2022Aug 4, 2022

• spiffe-connector

  Public
  Using SPIFFE Verifiable Identity Documents to seamlessly authenticate to existing services.

  Go

  •

  Apache License 2.0

  •1•2•0•0•Updated May 11, 2022May 11, 2022

• kustomize-cert-manager-demo

  Public
  Demo using Kustomize for per-environment deployment of cert-manager

  14•26•0•0•Updated Mar 24, 2022Mar 24, 2022

• gh-upload-sbom

  Public
  Publishes BOMs to Dependency-Track from GitHub Actions

  JavaScript

  •

  Apache License 2.0

  •30•0•0•0•Updated Mar 1, 2022Mar 1, 2022

• terraform-google-gke-cluster

  Public archive
  A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

  kubernetesgoogleterraform+ 2gketerraform-module

  HCL

  •

  Apache License 2.0

  •88•163•0•0•Updated Feb 10, 2022Feb 10, 2022

• kube-lego

  Public archive
  DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

  kubernetesingressletsencrypt

  Go

  •

  Apache License 2.0

  •264•2.2k•95•9•Updated Aug 26, 2021Aug 26, 2021

• vault-plugin-auth-google

  Public archive
  A plugin for Hashicorp Vault to allow Google Domain authentication.

  Go

  •

  Mozilla Public License 2.0

  •18•0•0•0•Updated May 18, 2021May 18, 2021

• vault

  Public archive
  A tool for managing secrets.

  Go

  •

  Mozilla Public License 2.0

  •4.4k•0•0•0•Updated May 18, 2021May 18, 2021

• service-mesh-con-2021-service-identity

  Public
  Scripts that I used in demos for the 2021 ServiceMeshCon talk; Service Identity - The Key to Zero Trust with

  Shell

  •1•1•0•0•Updated Apr 30, 2021Apr 30, 2021

• cert-manager-external-issuer-example

  Public archive
  An example repository implementing an external LocalCA issuer type

  Go

  •7•9•1•0•Updated Mar 11, 2021Mar 11, 2021