Repositories list

• jetstack-secure

  Public
  This is the Venafi Kubernetes Agent. The Venafi Kubernetes Agent gathers data for machine identities and other Kubernetes resources, such as ingresses, from Kubernetes clusters connected to Venafi Control Plane.

  Go

  •

  Apache License 2.0

  •25•257•12•8•Updated Jun 19, 2025Jun 19, 2025

• terraform-provider-tlspc

  Public
  Terraform Provider for the Venafi TLS Protect Cloud Platform

  terraformterraform-providervenafi+ 1venafi-cloud

  Go

  •

  Mozilla Public License 2.0

  •0•2•14•2•Updated Jun 17, 2025Jun 17, 2025

• paranoia

  Public
  Inspect certificate authorities in container images

  containerscertificate-authoritycontainer-security+ 2tlssecurity

  Go

  •

  Apache License 2.0

  •9•234•6•3•Updated Jun 17, 2025Jun 17, 2025

• version-checker

  Public
  Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.

  godockerkubernetes+ 9utilityimagegrafanaprometheusquayversiongcr+ 2

  Go

  •

  Apache License 2.0

  •79•736•29•6•Updated Jun 3, 2025Jun 3, 2025

• finops-stack

  Public
  Go

  •

  Apache License 2.0

  •1•12•0•2•Updated Apr 28, 2025Apr 28, 2025

• certified-operators

  Public
  Production catalog for Red Hat Certified Operator Bundles

  Dockerfile

  •

  Apache License 2.0

  •500•0•0•0•Updated Apr 16, 2025Apr 16, 2025

• homebrew-jetstack

  Public
  Homebrew tap for Jetstack tools

  Ruby

  •0•0•0•0•Updated Apr 15, 2025Apr 15, 2025

• fleetops-gke-ambient

  Public
  Makefile

  •

  Apache License 2.0

  •0•0•0•0•Updated Sep 10, 2024Sep 10, 2024

• kube-oidc-proxy

  Public archive
  Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.

  Go

  •

  Apache License 2.0

  •101•476•27•8•Updated Aug 10, 2024Aug 10, 2024

• dependency-track-exporter

  Public
  Go

  •

  Apache License 2.0

  •8•24•4•11•Updated Aug 3, 2024Aug 3, 2024

• envoy-workload-identity

  Public
  Example of no-code GCP Workload Identity using Envoy Proxy

  Python

  •0•0•0•0•Updated Jun 24, 2024Jun 24, 2024

• seaglass

  Public
  Go

  •

  Other

  •0•3•2•0•Updated Apr 28, 2024Apr 28, 2024

• gke-simple-custom-ingress

  Public
  Designed to be used alongside the blog

  HCL

  •

  Apache License 2.0

  •0•0•0•0•Updated Apr 23, 2024Apr 23, 2024

• jwt-registry-auth

  Public
  Go

  •

  Apache License 2.0

  •0•3•0•0•Updated Nov 21, 2023Nov 21, 2023

• tally

  Public
  Go

  •

  Apache License 2.0

  •0•14•7•9•Updated Nov 13, 2023Nov 13, 2023

• jsctl

  Public archive
  CLI tool for Jetstack Secure

  Go

  •

  Apache License 2.0

  •4•2•8•4•Updated Sep 18, 2023Sep 18, 2023

• spire-keymanager-test

  Public
  basic keymanager to test functionality of it with SPIRE

  Go

  •0•0•0•0•Updated Jun 29, 2023Jun 29, 2023

• vcert

  Public
  Go client SDK and command line utility designed to simplify integrations by automating key generation and certificate enrollment using Venafi machine identity services.

  Go

  •

  Apache License 2.0

  •66•1•0•1•Updated Jun 6, 2023Jun 6, 2023

• binpak

  Public archive
  A new way of visualising kubernetes workloads.

  TypeScript

  •

  Apache License 2.0

  •0•0•3•0•Updated Oct 25, 2022Oct 25, 2022

• jetstack-secure-gcm

  Public
  Contains configuration and user guide for the Jetstack Secure for cert-manager offering on the Google Cloud Marketplace.

  jetstack-securecert-managergoogle-cloud-marketplace

  Mustache

  •2•1•9•2•Updated Sep 8, 2022Sep 8, 2022

• spiffe-workload-identity-demo

  Public
  Demo of using cert-manager SPIFFE for for workload identity

  Go

  •

  Apache License 2.0

  •0•5•0•0•Updated Aug 4, 2022Aug 4, 2022

• spiffe-connector

  Public
  Using SPIFFE Verifiable Identity Documents to seamlessly authenticate to existing services.

  Go

  •

  Apache License 2.0

  •1•2•0•0•Updated May 11, 2022May 11, 2022

• kustomize-cert-manager-demo

  Public
  Demo using Kustomize for per-environment deployment of cert-manager

  14•26•0•0•Updated Mar 24, 2022Mar 24, 2022

• gh-upload-sbom

  Public
  Publishes BOMs to Dependency-Track from GitHub Actions

  JavaScript

  •

  Apache License 2.0

  •27•0•0•0•Updated Mar 1, 2022Mar 1, 2022

• terraform-google-gke-cluster

  Public archive
  A Terraform module to create a best-practise Google Kubernetes Engine (GKE) cluster.

  kubernetesgoogleterraform+ 2gketerraform-module

  HCL

  •

  Apache License 2.0

  •89•162•0•0•Updated Feb 10, 2022Feb 10, 2022

• kube-lego

  Public archive
  DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

  kubernetesingressletsencrypt

  Go

  •

  Apache License 2.0

  •264•2.2k•95•9•Updated Aug 26, 2021Aug 26, 2021

• vault-plugin-auth-google

  Public archive
  A plugin for Hashicorp Vault to allow Google Domain authentication.

  Go

  •

  Mozilla Public License 2.0

  •18•0•0•0•Updated May 18, 2021May 18, 2021

• vault

  Public archive
  A tool for managing secrets.

  Go

  •

  Mozilla Public License 2.0

  •4.4k•0•0•0•Updated May 18, 2021May 18, 2021

• service-mesh-con-2021-service-identity

  Public
  Scripts that I used in demos for the 2021 ServiceMeshCon talk; Service Identity - The Key to Zero Trust with

  Shell

  •1•1•0•0•Updated Apr 30, 2021Apr 30, 2021

• cert-manager-external-issuer-example

  Public archive
  An example repository implementing an external LocalCA issuer type

  Go

  •7•9•1•0•Updated Mar 11, 2021Mar 11, 2021