We originally wrote this to support ISV integrations, but from some discussions at summit last week, it seems like there was broader interest among platform operators as well for something like this.

When deployed with a Helm chart and added to the cf marketplace:

• "cf create-serive" calls to Kibosh will create the collection of Kubernetes resources described by the chart
• "cf bind-service" calls to Kibosh will expose back any services and secrets created by the chart

The broker is deploy-able via BOSH and has errands for tasks like pushing images to a private registry and registering itself as a broker in the marketplace.

The code:
https://github.com/cf-platform-eng/kibosh

Matt Cholick
Platform Engineering Team @ Pivotal