# Projects
> Open source projects and Helm charts maintained by Jan-Otto Kröpke: helm-secrets, openvpn-auth-oauth2, windows_exporter, access-log-exporter, and charts in prometheus-community, grafana-community, and Sveltos.

Canonical URL: https://jkroepke.de/projects/
Last modified: 2026-10-19


Most of my free engineering time goes into open source. Almost every project here started as a fix for my own problem at work. Then other people had the same problem. In my opinion, that is the only good reason to start an open source project.

Found a bug? Open an issue. Can you fix it? Even better, open a pull request.

## Projects


### [helm-secrets](https://github.com/jkroepke/helm-secrets)

Author · Shell · Helm, sops, Argo CD

Helm plugin that decrypts sops or vals encrypted values files on the fly. Keep secrets in Git, next to your charts. Works with Helm, Helmfile and Argo CD. Secrets in Git are fine when they are encrypted. Secrets in a wiki page are not.

Documentation: https://github.com/jkroepke/helm-secrets/wiki

### [openvpn-auth-oauth2](https://github.com/jkroepke/openvpn-auth-oauth2)

Author · Go · OpenVPN, OIDC, SSO

Single sign-on for the OpenVPN server. Users log in with Entra ID, Keycloak or any other OIDC provider, and you get MFA and conditional access for free. Static VPN passwords should have died years ago.

Documentation: https://github.com/jkroepke/openvpn-auth-oauth2/wiki

### [windows_exporter](https://github.com/prometheus-community/windows_exporter)

Maintainer · Go · Prometheus, Windows, Monitoring

The Prometheus exporter for Windows machines. Think node_exporter, but for Windows hosts and Windows nodes in Kubernetes. Windows nodes still exist. They need monitoring, too.

### [access-log-exporter](https://github.com/jkroepke/access-log-exporter)

Author · Go · Prometheus, nginx, syslog

Receives nginx access logs over syslog and turns them into Prometheus metrics: request rates, status codes and latencies. You do not need a log pipeline to count HTTP 500s.

Documentation: https://github.com/jkroepke/access-log-exporter/wiki

### [lens-extension-certificate-info](https://github.com/jkroepke/lens-extension-certificate-info)

Author · TypeScript · Lens, Kubernetes, TLS

Lens extension that shows the expiry date of certificates stored in Kubernetes secrets. Expired certificates are the most boring outage there is.


## Helm charts

I'm the general admin of the prometheus-community and grafana-community Helm chart repositories, and I maintain charts there and in Sveltos. A widely used chart is an API: every renamed value breaks someone's production. I review accordingly.


### [prometheus-community](https://github.com/prometheus-community/helm-charts)

Admin

General admin of the whole repository. Charts I maintain directly:


- [kube-prometheus-stack](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack): Prometheus Operator, Prometheus, Alertmanager, Grafana and default rules in one chart.
- [prometheus-operator-crds](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-operator-crds): The Prometheus Operator CRDs, with their own lifecycle.
- [prometheus-windows-exporter](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-windows-exporter): windows_exporter as a DaemonSet for Windows nodes.
- [prom-label-proxy](https://github.com/prometheus-community/helm-charts/tree/main/charts/prom-label-proxy): Label-based access control for Prometheus, Thanos and Alertmanager APIs.
- [jiralert](https://github.com/prometheus-community/helm-charts/tree/main/charts/jiralert): Jira tickets from Alertmanager notifications.
### [grafana-community](https://github.com/grafana-community/helm-charts)

Admin

General admin of the whole repository, including CI and Renovate. Charts I maintain directly:


- [grafana](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana): The Grafana chart.
- [loki](https://github.com/grafana-community/helm-charts/tree/main/charts/loki): The Loki chart.
- [grafana-mcp](https://github.com/grafana-community/helm-charts/tree/main/charts/grafana-mcp): The Grafana MCP server.
### [Sveltos](https://github.com/projectsveltos/helm-charts)

Maintainer


- [projectsveltos](https://github.com/projectsveltos/helm-charts/tree/main/charts/projectsveltos): Sveltos, add-on management for tens of Kubernetes clusters.

More on my [GitHub profile](https://github.com/jkroepke).