checkov - Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew

•    Python

Checkov is a static code analysis tool for infrastructure-as-code. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, Kubernetes, Dockerfile, Serverless or ARM Templates and detects security and compliance misconfigurations using graph-based scanning.

kube-linter - KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices

•    Go

KubeLinter analyzes Kubernetes YAML files and Helm charts, and checks them against a variety of best practices, with a focus on production readiness and security. KubeLinter runs sensible default checks, designed to give you useful information about your Kubernetes YAML files and Helm charts. This is to help teams check early and often for security misconfigurations and DevOps best practices. Some common examples of these include running containers as a non-root user, enforcing least privilege, and storing sensitive information only in secrets.

helm-charts

•    Smarty

The code is provided as-is with no warranties. Helm must be installed to use the charts. Please refer to Helm's documentation to get started.

helm-secrets - A helm plugin that help manage secrets with Git workflow and store them anywhere

•    Shell

Wraps the whole helm command. Slow on multiple value files. Run decrypted command on specific value files.

k8sapp - Application template that satisfies the Kubernetes requirements (Golang)

•    Go

A sample application that meets the requirements for successful execution in Kubernetes. Kubernetes application must have two health checks for successful execution of the application. Integrated methods help correctly responding to Kubernetes queries.

dex-k8s-authenticator - A Kubernetes Dex Client Authenticator

•    Go

A helper web-app which talks to one or more Dex Identity services to generate kubectl commands for creating and modifying a kubeconfig. The Web UI supports generating tokens against multiple cluster such as Dev / Staging / Production.

helm-certgen - Helm plugin for generation of TLS certificates

•    Go

This repository is for certgen plugin for Kubernetes Helm CLI. This plugin enables TLS certificate generation for helm charts. To use the helm-certgen plugin, the helm charts should have a cert.yaml file which outlines the requirements for certificates (the CSR details, alias names etc.,). The plugin will use these information to generate the certificates and place them as a Kubernetes secret in the appropriate namespace.

common-chart - A base Helm chart with shared definitions

•    Smarty

One little-know feature of Helm charts is the ability to share chart definitions among all templates in a chart, including any of the subchart templates. The common chart is a chart that defines commonly used Chart primitives that can be used in all of your charts.

tscharts - Example chart repository for Helm.

This is an example charts repository.

vscode-helm - Helm Visual Studio Code extension for chart developers

•    TypeScript

It has all of the features of this plugin, plus many more, and will be kept up-to-date. This Visual Studio Code extension provides Kubernetes Helm chart developers with a set of tools for creating and testing charts.

helm-secrets - A helm plugin that help manage secrets with Git workflow and store them anywhere

•    Shell

Developed and used in all environments in BaseCRM. We store secrets and values in helm_vars dir structure just like in this repository example dir. All this data versioned in GIT. Working in teams on multiple projects/regions/envs and multiple secrets files at once. We have Makefile in our Helm charts repo to simplify install helm-secrets plugin with helm and other stuff we use. Same Makefile used to rebuild all helm charts with dependencies and some other everyday helpers. Encrypting, Decrypting, Editing secrets on local clones, making #PR's and storing this in our helm charts repo encrypted with PGP, AWS KMS and GCP KMS. Deploying using helm-wrapper from local or from CI with same charts and secrets/values from GIT repository.

helmet - Helmet is a easy to use Helm repository

•    Go

Helmet is simple and easy to use Helm(https://helm.sh) repository, useful when you want to setup a private Helm repository and be able to easy upload new helm charts. Typically deployed to the same Kubernetes cluster in which you want to deploy helm charts into. Example of uploading a chart to a locally running Helmet.

helmsman - A Helm Charts as Code tool.

•    Go

Helmsman is a Helm Charts (k8s applications) as Code tool which allows you to automate the deployment/management of your Helm charts from version controlled code. Helmsman uses a simple declarative TOML file to allow you to describe a desired state for your k8s applications as in the example file.

charts - The IBM/charts repository provides helm charts for IBM and Third Party middleware.

•    Smarty

The IBM/charts repository provides helm charts provided by IBM. To access the kubernetes apiserver, you will need an authorization token and the kubectl as the access client. In IBM® Cloud private®, authorization tokens can be requested via the dashboard or the REST API.

helm-elasticstack - Kubernetes Helm Charts and Tools to run Elastic Stack(ELK) on Azure Container Service(AKS)

•    Go

These Helm charts bootstrap a production ready Elastic Stack service on a Kubernetes cluster managed by Azure Container Service (AKS) and other Azure services. A few Azure resources need to be provisioned before proceeding with the Helm charts installation.

polyaxon-chart - Helm charts for creating reproducible and maintainable deployments of Polyaxon with Kubernetes

•    Smarty

Helm charts for creating reproducible and maintainable deployments of Polyaxon with Kubernetes. This chart bootstraps a Polyaxon deployment on a Kubernetes cluster using the Helm package manager.

banzai-charts - Curated list of Banzai Cloud Helm charts used by the Pipeline Platform

•    Smarty

At Banzai Cloud we use Helm as our package manager to deploy Kubernetes applications. This is a collection of curated Banzai Cloud Helm charts being part of our PaaS, Pipeline. Helm has some requirements for testing charts which can be cumbersome or requires resources developers might not have on their laptop. We have automated testing of Helm charts from a feature branch.

helm-elasticsearch - An Elasticsearch cluster on top of Kubernetes, made easier, with Helm.

•    Smarty

An Elasticsearch cluster on top of Kubernetes, made easier. A Helm chart that essentially lifts-and-shifts the core manifests in the pires/kubernetes-elasticsearch-cluster project.

quiz - Example real time quiz application with

•    CSharp

Simple EventSourcing example using .NET Core, React, Docker, Jenkins and K8s.

helm-maven-plugin - Maven Plugin for Helm Charts

•    Kotlin

A Maven Plugin for Helm Charts