Projects
Bare Metal Kubernetes Homelab
3-node kubeadm cluster on Dell OptiPlex hardware. GitOps-managed with Flux CD, SOPS+age encrypted secrets, MetalLB load balancer, Traefik ingress, and Cloudflare tunnels for external access. Full observability via kube-prometheus-stack. Nightly Restic backups to NAS.
kubeadm
Flux CD
Traefik
MetalLB
SOPS
Renovate
Prometheus
Grafana
Restic
CIS Kubernetes Benchmark Hardening
Ran kube-bench against a self-managed kubeadm cluster (k8s 1.36.2). Remediated all 10 automated FAILs, addressed Manual WARNs with documented rationale. Baseline 39 PASS / 10 FAIL to final 52 PASS / 0 FAIL.
kube-bench
Kubernetes
CIS Benchmark
kubeadm
Security