H

helm

Self-hosted Kubernetes image vulnerability monitor for a fleet of clusters. Runs on its own VM outside every cluster it watches, reads each with a read-only credential, and assesses images either from an in-cluster agent or from their own registry. Trivy in isolated workers; never writes to a monitored cluster.

🗳️ Votely is a polling web app (React, FastAPI, PostgreSQL) built as a DevOps showcase: the application is the pretext, the delivery platform is the point.

✅ Tests from unit to end-to-end, a GitLab CI pipeline with security gates (gitleaks, Semgrep, Trivy, SBOM), build-once/promote releases, Helm charts for Kubernetes, AWS infrastructure with Terraform, keyless CI access through OIDC, images signed with Cosign and AWS KMS, k3s on EC2 with a disposable server and persistent data, HTTPS with cert-manager and Let's Encrypt, GitOps with Argo CD (staging on every merge, production on release tags, rollback by git revert, Sealed Secrets), observability with Prometheus and Grafana (API metrics, dashboard and alerts as code).

📖 Documented in English and French.