kube-cert-manager - Manage Lets Encrypt certificates for a Kubernetes cluster.

•    Go

---

This project is loosely based on https://github.com/kelseyhightower/kube-cert-manager It took over most of its documentation, license, as well as the general approach to how things work. The code itself however, was entirely reimplemented to use xenolf/lego as the basis, instead of reimplementing an ACME client and DNS plugins.

certificate kubernetes tls letsencrypt

kube-cert-manager - Manage Lets Encrypt certificates for a Kubernetes cluster.

•    Go

---

This is not an official Google Project.The secrets created by the Kubernetes Certificate Manager can be used to configure any TLS terminating load balancer.

certify - SSL Certificate Manager UI for Windows, powered by Let's Encrypt

•    CSharp

---

The SSL/TLS Certificate Management GUI for Windows, powered by Let's Encrypt, allowing you to generate and install free SSL certificates for Windows/IIS (with automated renewal). Advanced users can explore the different validation modes, deployment modes and other advanced options.

ssl-certificate-manager letsencrypt iis gui-application letsencrypt-certificates ssl

kube-lego - Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

•    Go

---

kube-lego is in maintenance mode only. There is no plan to support any new features. The latest Kubernetes release that kube-lego officially supports is 1.8. The officially endorsed successor is cert-manager. If you are a current user of kube-lego, you can find a migration guide here.

kubernetes letsencrypt ingress

gke-letsencrypt - Tutorial for installing cert-manager to get HTTPS certificates from Let’s Encrypt

•    

---

This is not an official Google product or documentation.

kubernetes letsencrypt gke

lemur - Repository for the Lemur Certificate Manager

•    Python

---

Lemur manages TLS certificate creation. While not able to issue certificates itself, Lemur acts as a broker between CAs and environments providing a central portal for developers to issue TLS certificates with 'sane' defaults.It works on CPython 3.5. We deploy on Ubuntu and develop on OS X.

tls ssl ssl-certificates aws certificate-manager

pem - Create private keys and certificates with node.js

•    Javascript

---

Here are some examples for creating an SSL key/cert on the fly, and running an HTTPS server on port 443. 443 is the standard HTTPS port, but requires root permissions on most systems. To get around this, you could use a higher port number, like 4300, and use https://localhost:4300 to access your server. Please have a look into the API documentation.

certificate csr certificate-signing-request tls-certificate tls signing pem ssl-certificate ssl nodejs signing-certificates

certstrap - Tools to bootstrap CAs, certificate requests, and signed certificates.

•    Go

---

A simple certificate manager written in Go, to bootstrap your own certificate authority and public key infrastructure. Adapted from etcd-ca.certstrap is a very convenient app if you don't feel like dealing with openssl, its myriad of options or config files.

crypto certificate bootstrap certificate-authority ssl csr tls

JustTrustMe - An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

•    Java

---

An xposed module that disables SSL certificate checking. This is useful for auditing an application which does certificate pinning. There also exists a nice framework built by @moxie to aid in pinning certs in your app: certificate pinning. An example of an application that does cert pinning is Twitter. If you would like to view the network traffic for this application, you must disable the certificate pinning.

arkade - Open Source Kubernetes Marketplace

•    Go

---

arkade provides a portable marketplace for downloading your favourite devops CLIs and installing helm charts, with a single command. You can also download CLIs like kubectl, kind, kubectx and helm faster than you can type "apt-get/brew update".

nginx kubernetes cli learning devops automation oss helm apps k8s istio openfaas cka cert-manager ckad k3s arkade inlets

acme-client-quick - Get Let's Encrypt Cert In Five Minutes

•    PHP

---

Get Let's Encrypt Cert In Five Minutes

letsencrypt https certificate

ssh-cert-authority - An implementation of an SSH certificate authority.

•    Go

---

A democratic SSH certificate authority. Operators of ssh-cert-authority want to use SSH certificates to provide fine-grained access control to servers they operate, keep their certificate signing key a secret and not need to be required to get involved to actually sign certificates. A tall order.

dokku-letsencrypt - BETA: Automatic Let's Encrypt TLS Certificate installation for dokku

•    Shell

---

dokku-letsencrypt is the official plugin for dokku that gives the ability to automatically retrieve and install TLS certificates from letsencrypt.org. During ACME validation, your app will stay available at any time.Note: Your app must already be deployed and accessible in the browser in order to add letsencrypt to your app. Your app just being created is not enough. If you need to, add a temporary certificate to your app prior to adding letsencrypt by running dokku certs:generate <app> DOMAIN to make your app accessible.

Lego - Let's Encrypt client and ACME library

•    Go

---

Let's Encrypt client and ACME library written in Go.

letsencrypt acme certificate security letsencrypt-client

certificates - 🛡️ An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere

•    Go

---

An online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere. For more information and docs see the Step website and the blog post announcing Step Certificate Authority.

tls x509 certificates security security-tools certificate-authority pki ca

KFile-Cert plugin

•    C++

---

kfile-cert is a plugin for KDE that displays additional information on X509 certificate files in the file properties dialog and file pop-up tip in Konqueror. The information includes: certificate status, validity term, issuer, subject.

chaos-mesh - A Chaos Engineering Platform for Kubernetes.

•    Go

---

This readme and related documentation are Work in Progress. Controller-manager: used to schedule and manage the lifecycle of CRD objects.

kubernetes microservice site-reliability-engineering cncf chaos operator cloud-native fault-injection hacktoberfest chaos-testing chaos-engineering crd chaos-experiments chaos-mesh

caman - A self-signing certificate authority manager

•    Shell

---

A self-signing certificate authority manager - create your own certificate authority, and generate and manage SSL certificates using openssl. This document explains how to use caman to create a certificate authority, optionally use an intermediate CA, and to create, sign, renew and revoke host certificates.

local-cert-generator - A set of scripts to quickly generate a HTTPS certificate for your local development environment

•    Shell

---

A set of scripts to quickly generate a HTTPS certificate for your local development environment. Note: You may need to restart your browser to load the newly trusted root certificate correctly.

https ssl-certificate https-certificate

gardener - Kubernetes API server extension and controller manager managing the full lifecycle of conformant Kubernetes clusters (Shoots) as a service on AWS, Azure, GCP, and OpenStack

•    Go

---

The Gardener implements the automated management and operation of Kubernetes clusters as a service and aims to support that service on multiple Cloud providers (AWS, GCP, Azure, OpenStack). Its main principle is to use Kubernetes itself as base for its tasks. In essence, the Gardener is an extension API server along with a bundle of Kubernetes controllers which introduces new API objects in an existing Kubernetes cluster (which is called Garden cluster) in order to use them for the management of further Kubernetes clusters (which are called Shoot clusters). To do that reliably and to offer a certain quality of service, it requires to control the main components of a Kubernetes cluster (etcd, API server, controller manager, scheduler). These so-called control plane components are hosted in Kubernetes clusters themselves (which are called Seed clusters).

kubernetes gardener aws azure gcp openstack cluster