Four products, one platform.

01 / 04

Helm Charts

One chart, all workloads.

The app-starter chart family covers roughly 90% of Kubernetes workloads (Deployments, StatefulSets, Jobs, and CronJobs) behind a single, documented values interface. Extension charts handle namespace- and cluster-scoped resources so applications stay clean.

• ▸app-starter: universal workload chart with one values contract
• ▸app-extensions: Secrets, ConfigMaps, RBAC, NetworkPolicies
• ▸platform-extensions: ClusterRoles, ClusterSecretStores, Certificates
• ▸Published open source on Artifact Hub and as OCI on GHCR

02 / 04

Platform Starter Kits

The platform, as repos you own.

Terraform and ArgoCD configuration that stands up a complete platform: cluster, networking, ingress, TLS, DNS, secrets, observability, and security. Delivered as versioned Git repositories in your org. No black box, no lock-in.

• ▸DigitalOcean (DOKS): live, running our own production platform
• ▸AWS (EKS): multi-account organization and landing zone, in progress
• ▸GCP (GKE): planned
• ▸GitOps from the first commit: app-of-apps, layered values, sync waves

03 / 04

App Starter Repos

From git init to deployed.

Opinionated application templates for Go, TypeScript, and Python monorepos with CI, container builds, and GitOps delivery already wired to the platform and charts.

• ▸Go services with Goreleaser multi-arch builds
• ▸TypeScript / Next.js monorepos with Turborepo and pnpm
• ▸Python services on uv
• ▸Images to GHCR, deploys via ArgoCD, no custom scripts

04 / 04

Deployment Pipelines

Golden paths, supply chain included.

Reusable GitHub Actions workflows that encode the whole delivery path: build, test, scan, sign, publish, deploy. Security checks are the default, not an add-on.

• ▸Pinned, least-privilege reusable workflows
• ▸Trivy and CodeQL scanning wired into every build
• ▸Cosign image signing with admission enforcement
• ▸OIDC-based auth, no long-lived credentials in CI