Kubernetes & EKS
Helm charts, EKS cluster baselines, RBAC templates, namespace configs, and ingress setups.
Available Assets
GitOps Baseline with Flux v2
Terraform and Flux bootstrap config: installs Flux on EKS, connects to GitHub repo, sets up image update automation and Slack notifications for deployment events.
Velero Backup Configuration
Helm values and BackupSchedule manifests for Velero backing up to S3 with encryption. Includes a tested restore runbook and backup verification cron job.
Multi-Tenant EKS RBAC Pack
ClusterRoles, Roles, and RoleBindings for four personas: read-only viewer, developer scoped to own namespace, platform engineer, and emergency break-glass role.
Horizontal Pod Autoscaler Pack
HPA manifests and KEDA ScaledObject configurations for CPU-based, memory-based, and SQS queue depth autoscaling. Includes load testing scripts to validate scaling behavior.
Pod Security Standards Baseline
Kubernetes manifests enforcing Pod Security Standards at namespace level with audit logging for violations and a migration guide from deprecated PodSecurityPolicy.
EKS IRSA Role Factory
Terraform module creating IAM roles with OIDC trust for EKS service accounts. Pre-built policy attachments for S3, SQS, Secrets Manager, DynamoDB, and ECR.
kube-prometheus-stack Starter Config
Pre-tuned Helm values for kube-prometheus-stack: storage class settings, retention periods, Alertmanager routing, and 8 Grafana dashboards pre-enabled.
Ingress, cert-manager & ExternalDNS Stack
Helm values and installation order for correctly wiring Traefik v3 ingress, cert-manager with Let Encrypt, and ExternalDNS. Common misconfiguration pitfalls documented.
Namespace Hardening Pack
Helm chart applying resource quotas, LimitRanges, default NetworkPolicies, and baseline RBAC roles to any namespace.
EKS Cluster Baseline
Terraform: production-ready EKS cluster with managed node groups, IRSA, VPC CNI, cluster autoscaler, and EBS CSI driver.