Kubernetes-like control planes for form-factors and use-cases beyond Kubernetes and container workloads.

Simple tool to convert files to MachineConfig objects to be used with the machine-config-operator in Kubernetes/OpenShift

Libraries to abstract aspects of working with TPMs for the purposes of attestation

Very small examples of TLA+ features.

Distributed reliable key-value store for the most critical data of a distributed system

on the way~

Open Source Identity and Access Management For Modern Applications and Services

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

A plugin to enforce OPA policies with Envoy

in-toto is a framework to protect supply chain integrity.

Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

🐊 Policy Controller for Kubernetes

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

Format Agnostic jQ -- process various formats with libjq

ACME Controller for OpenShift and Kubernetes Cluster. (Supports e.g. Let's Encrypt)

A protocol for automating certificate issuance

A management framework for extending Kubernetes with Operators

Kinda Chaos Monkey for Kubernetes

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

⚠️(OBSOLETE) Curated applications for Kubernetes

Wordpress Theme for Bullet Train Magazine

mTCP: A Highly Scalable User-level TCP Stack for Multicore Systems

Parsing HTML at the command line

An optional type system for Clojure

Open source framework for processing, monitoring, and alerting on time series data

Node module to abstract away the complexities of the SAML protocol behind an easy to use interface.