Pinned Loading

1. EKS-Karpenter-Terraform EKS-Karpenter-Terraform Public

   Production-grade EKS cluster provisioned in two Terraform phases — VPC, private nodes, VPC endpoints for NAT cost reduction, Karpenter Spot-first autoscaling, and AWS Load Balancer Controller. Incl…

   HCL

2. EKS-Envoy-Gateway EKS-Envoy-Gateway Public

   Step-by-step guide to deploying Envoy Gateway on EKS with AWS Load Balancer Controller — covering EnvoyProxy CRD configuration, NLB provisioning, HPA autoscaling, graceful shutdown with preStop hoo…

   Go Template

3. Livekit-Helm Livekit-Helm Public

   LiveKit Server on EKS with ARM64/Graviton nodes — hostNetwork for WebRTC media ports, Kubernetes secret handling for API keys, kgateway + AWS ALB with ACM TLS for WSS signaling, TURN relay, and ICE…

   Go Template

4. Lets-Encrypt-Clusterissuer-K8s Lets-Encrypt-Clusterissuer-K8s Public

   Production runbook for HTTPS with cert-manager and Let's Encrypt HTTP-01 ACME on Kubernetes — covering EKS with Envoy Gateway and GKE Autopilot with Gateway API. Includes ClusterIssuer setup, stati…

   HCL

5. precommit-hook precommit-hook Public

   Standardized pre-commit + Gitleaks setup for secret scanning across repositories — local hooks for developer-side prevention, GitHub Actions for CI enforcement on every PR and push, and automated w…

6. Vault-ESO-Reloader Vault-ESO-Reloader Public

   Production-grade secret management on EKS — HashiCorp Vault (HA Raft + AWS KMS Auto-Unseal + IRSA), External Secrets Operator, and Stakater Reloader wired end-to-end. Zero static credentials, autom…

   Go Template