DevOps Engineer passionate about Cloud Infrastructure, Kubernetes, and Automation. Building open-source tools for the DevOps community.
Follow for new Kubernetes operators, GitHub Actions, and OSS contribution updates.
| Project | Description | Stars |
|---|---|---|
| compress-decompress | GitHub Action for file compression/decompression |  |
| network-policy-generator | Kubernetes operator that generates NetworkPolicy from a CRD |  |
| cicd-monitoring | Production-ready CI/CD & monitoring stack for AWS/GCP/on-prem Kubernetes |  |
| kube-ctx | Single-binary kubectx/kubens replacement with per-terminal context isolation, production guards, and a built-in fuzzy picker |  |
| helios-lb | Kubernetes controller providing bare-metal LoadBalancer IP allocation (MetalLB-style) |  |
| k8s-namespace-sync | Kubernetes controller that syncs Secrets/ConfigMaps across namespaces |  |
| git-bridge | Multi-provider Git mirror: CodeCommit, GitLab, GitHub any-to-any with webhooks & SQS |  |
Contributions to external open-source projects.
| Project | PR | Contribution |
|---|---|---|
| apache/airflow | #67675 | Gateway API HTTPRoute support for the API server |
| elastic/elasticsearch | #151614 | S3 snapshot repository: EKS Pod Identity credential support |
| go-gitea/gitea | #38863 | Stream bundle downloads instead of writing a repo-sized temp file to disk first |
| k3s-io/k3s | #14516 | Add advertise-address to the SANs before generating the apiserver serving certificate |
| pulumi/pulumi | #24939 | Lock the cleanup and clone or pull of the shared templates directory, so concurrent pulumi new runs no longer delete each other's in-progress clone |
| prometheus-operator/prometheus-operator | #8728 | Add spec.retentionPercentage to the Prometheus CRD for percentage-based TSDB retention (Prometheus >= v3.11.0) |
| projectcalico/calico | #13979 | Accept the full 4-byte AS number range (RFC 4893) in the BGPConfiguration, BGPPeer and BGPFilter CRD schemas |
| open-telemetry/opentelemetry-collector-contrib | #49146 | Add opt-in TLS support to the memcached receiver |
| nginx/nginx-gateway-fabric | #5392 | Add GEP-713 Programmed status condition to custom policies |
| getmoto/moto | #10062 | Add EC2 snapshot tiering APIs (archive / describe-status / restore) |
| anchore/grype | #3519 | Add vulnerable version ranges to the CycloneDX output format |
| tektoncd/pipeline | #10548 | Filter ResolutionRequests by the resolver's own label selector on leader promotion, so one resolver no longer fails requests owned by another |
| fluxcd/flux2 | #5975 | Add an opt-in version-file input to the Flux CLI GitHub Action |
| kubernetes-sigs/kueue | #12736 | Fix a data race on the ClusterQueue sticky workload between the Visibility API snapshot and preemption requeue |
| external-secrets/external-secrets | #6481 | Scope the ESO cert-controller ClusterRole to least-privilege in the Helm chart |
| vectordotdev/vector | #25607 | Add a host_metrics temperature collector via sysinfo Components |
| argoproj-labs/terraform-provider-argocd | #920 | Restore project role policy validation lost in the plugin-framework migration, sourcing the allowed resources from Argo CD's exported project-scoped set |
