██████╗ ██╗ ██████╗ ██╗ ██╔══██╗ ██║ ██╔══██╗ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██║ ██████╔╝ ██║ ██████╔╝ ██║ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝
DevOps / Platform Engineer · Kubestronaut · didibe.dev
I build and operate Kubernetes infrastructure and automation pipelines.
Currently exploring Internal Developer Platforms w/ Backstage, Crossplane & Supply Chain Security
| Project | Description |
|---|---|
| eks-idp-platform | Production IDP on AWS EKS. Terraform modules, ArgoCD, Kyverno, Cilium, Karpenter, and hardened CI with SHA-pinned actions, harden-runner, and Trivy v0.35.0.        |
| vcluster-platform | Virtual Kubernetes clusters: the isolation of a real cluster at the cost of a namespace (~370 Mi per tenant, ready in ~35s). Self-service platform where teams get clusters by opening a PR - measured benchmarks, blast-radius isolation, GitOps tenant onboarding. |
| kratix-platform | Self-service IDP: Kratix + Backstage + Flux on k3s, deployed from scratch with one command.   |
| practical-aks | Production-grade AKS build: blank Azure subscription → Workload Identity-secured, Trivy-scanned cluster running a live LLM proxy. CI/CD pipeline includes supply chain hardening: SHA-pinned Actions and harden-runner network egress control - the kind of attack the March 2026 Trivy compromise demonstrated. |
| gke-production-patterns | Production-grade GKE reference architecture: Cloud SQL, Memorystore, Terraform, Helm, CI/CD, observability, Temporal workflows, and incident response.   |
| Tokenguard Operator | Kubernetes operator scoring ServiceAccount least-privilege by comparing RBAC grants against audit log usage. Detects external IP token abuse. Go, Kubebuilder, controller-runtime. |
| NinjaDevOps | Interactive DevOps challenge platform - 80+ real-world challenges covering Linux, Docker, and Kubernetes (CKAD, CKA, CKS) in live GCP VMs. Broken servers, misconfigs, k8s emergencies - all from a browser terminal.     |
| Sovereign-Mesh | Multi-tenant AI PaaS on Hetzner: vLLM, Qdrant, and TEI on a hardened K3s cluster with tenant isolation and GitOps via ArgoCD.   |
Kubernetes & Orchestration
GitOps & IDP
Cloud & Infra
AI, Workflows & Automation
Security
AWS-SAA · CKA · CKAD · CKS · KCNA · KCSA · Kubestronaut 🎖️
Show older experiments
- youtube-channel-intelligence - Serverless YouTube monitoring + AI analysis on GCP
- k0s-hetzner-cluster - 2-node k0s cluster on Hetzner via Terraform
- terraform-aws-chatops-site - Deploy static sites by texting a Telegram bot
- content-machine - Serverless AI video generator on AWS Lambda
- tf-telegram-serverless-transcription-aws - Voice-to-text via AWS Transcribe
- insta-lead-hunter-ai - AI-enhanced Instagram lead qualification
- youtube-medium-article-agent - Automated video-to-article pipeline
- youtube-comment-classifier-mlops - MLOps pipeline with FastAPI + K3s
- tcp-hijacker-classic - Educational TCP/IP security tool
📖 Off the clock: I wrote Social Freedom Unleashed, a book on overcoming social anxiety.