Conjur Open Source

At Conjur Open Source, we’re creating the tools to help you build applications safely and securely - without having to be a security expert. From our flagship Conjur server (a secret store and RBAC engine), to custom authenticators that make the secret zero problem a thing of the past, to Secretless Broker, which aims to make sure your apps never have to worry about secrets again.

Not sure where to get started? Visit our "Where to Start" page on Discourse.

These are the primary repositories for Conjur Core and its SDK.

Conjur Server

Conjur Core and Deployment Tools.

Conjur SDK

Conjur Command Line Interface (CLI) and Client Libraries.

Conjur Open Source integrations with platforms and DevOps tools.

Platform Integrations

Tools for Conjur integrations with platforms and cloud providers.

  • cyberark/conjur-authn-k8s-client

     Kubernetes: The Conjur authenticator client can be deployed as a sidecar or init container to ensure your application has a valid Conjur access token.

  • cyberark/secrets-provider-for-k8s

     Kubernetes: The Conjur Secrets Provider for K8s is deployed as an init container in your application pod. It injects secrets from Conjur into Kubernetes secrets, which are accessible to your application pod.

  • cyberark/conjur-service-broker

     Cloud Foundry: The Conjur service broker ensures your Cloud Foundry-deployed applications are bootstrapped with a Conjur machine identity on deploy.

  • cyberark/cloudfoundry-conjur-buildpack

     Cloud Foundry: The Conjur buildpack brings the benefit of Summon to your Cloud Foundry-deployed applications. Leverage your app's Conjur identity to automatically inject the secrets your app needs into its environment at runtime.

DevOps Tools

Conjur Open Source integrations with DevOps tools.

  • cyberark/ansible-conjur-collection

     Ansible: Ansible collection containing the Conjur Ansible Role to provide Conjur identity to Ansible hosts, and the Conjur Lookup Plugin for fetching secrets from Conjur.

  • cyberark/ansible-conjur-host-identity

     Ansible: Ansible role to provide Conjur machine identity to application hosts and install the Summon tool, which enables hosts to securely retrieve credentials.

  • cyberark/conjur-credentials-plugin

     Jenkins: Conjur plugin for securely providing credentials to Jenkins jobs.

  • cyberark/conjur-puppet

     Puppet: Puppet module that simplifies the operation of establishing Conjur host identity and allows authorized Puppet nodes to fetch secrets from Conjur.

  • cyberark/terraform-provider-conjur

     Terraform: Terraform provider that makes secrets in Conjur available in Terraform manifests.

Tools to ensure your applications have access to the privileged systems they need.

Secretless Broker

  • cyberark/secretless-broker

     Secretless Broker can be used to securely connect your applications to services they need - without ever having to fetch or manage passwords and keys.

Summon

Many of our internal development tools are also open source. Take a look - we're happy to share. They might just solve a need that you have.

Development Tools