The ESP8266 and ESP32 Arduino Library to create Google OAuth2.0 Access Token used for Google Cloud Platform and Google REST APIs services. The token handled by this library will be refreshed automatically.

This repo contains the k8s deployment manifest to deploy the app into kubernetes cluster using ArgoCD

IAM Roles for Service Accounts (IRSA) on kops clusters

This is a controller to automatically create gcp service accounts an save them into kubernetes secrets

Kubernetes Service-to-Service Authentication using Service Accounts

Generate Google Service Account tokens with your YubiKey!

Kubernetes SSH Authentication gateway.

A simple server that exposes the OpenID discovery documents of a Kubernetes cluster.

Configure Fluent Bit to run inside Kubernetes cluster to send logs to Loggly

A light-weight sidecar designed to ensure the continuous validity of the service account token even for terminating pods.

An enterprise-grade PostgreSQL stack needs several other ecosystem components and significant tuning. It’s not only PostgreSQL. It requires connection pooling, automatic failover and HA, monitoring, backups and DR, centralized logging… we have built them all: a Postgres Stack.

Use Pulumi to (in GCP) create a service account, compute instance to use that service account, (in AWS) create an IAM role, and allow the GCP service account to assume the role via the Google OIDC provider support.

manage sa kubernetes with source repo with golang

Kubernetes operator to create, rotate and delete service account tokens with grace periods

Associate an IAM role with a Kubernetes service account