DevOps Portfolio.

Kubernetes, GitOps and security work. Projects link to the code or the write-up; open-source entries link to the merged PR; certifications are listed with issuer and date.

Projects

hop

Short links & pastes

A short-link service and a pastebin in one stdlib-only Go binary: token-protected writes, anonymous reads, expiry and a janitor, HTML or plain-text negotiation, a CLI built in. Runs at go.divyam.top and paste.divyam.top behind Caddy.

GoSQLitedistrolessCaddy

GitHub go.divyam.top

Projects

voyager

The GitOps box

One repo describes a 2-vCPU VPS end to end: a systemd timer pulls it every five minutes and converges with Docker Compose. Caddy is the only thing with public ports; behind it sit this portfolio, a Telegram bot, a Gatus status page, CrowdSec, a self-hosted NetBird VPN, analytics and hop.

Docker ComposeCaddysystemdCrowdSecNetBird

How it works Infrastructure

Projects

opsbridge

Mattermost ⇄ Gitea

Keeps Mattermost alert threads and Gitea issues in sync: Alertmanager-label ticket matching, status reporting, two-way assignment and comments. Ships with a Helm chart.

GoAlertmanagerGiteaHelm

GitHub helm-charts

Projects

tpaudit

Teleport audit log, from the shell

Search the Teleport audit log from the command line: the questions a security engineer actually asks, without the web UI.

GoTeleport

GitHub

Projects

k3s-terraform

Clusters as code, and KubeAid

k3s on AWS with IAM, cloud-controller-manager, Calico, cluster-autoscaler and HAProxy ingress. Plus day-to-day contributions to Obmondo’s KubeAid, a GitOps-native Kubernetes management suite, its CLI and config templates.

Terraformk3sAWSCluster APIGitOps

GitHub KubeAid

Open source

kubernetes-mixin

PR #1194 · fewer false pages

KubeHpaMaxedOut fired on HPAs whose min and max replicas were equal: noise, not a problem. Reported it (issue #1193) and changed the PromQL so fixed-size autoscalers never page anyone again.

PrometheusPromQLJsonnet

See the PR Issue #1193

Open source

bitnami/charts

PR #19568 · PodSecurity-clean

The RabbitMQ Operator chart violated PodSecurity standards on Kubernetes 1.26+ (issue #19394). The fix hardened the container security contexts so the chart deploys cleanly under restricted policies.

HelmRabbitMQ OperatorPodSecurity

See the PR Issue #19394

Open source

mattermost-helm

PR #396 · plugins, unblocked

Plugins that run their own web server had no way through the chart. Dynamic extraPorts support lets them deploy without forking the chart.

HelmMattermostKubernetes

See the PR

Certifications

Certified Kubernetes Administrator

The Linux Foundation · May 2026

Cluster architecture, installation and configuration, workloads and scheduling, services and networking, storage, troubleshooting.

CKA

Certifications

AWS Certified SysOps Administrator (Associate)

Amazon Web Services · Feb 2021

Monitoring, reliability, deployment, security and compliance, networking and cost optimisation on AWS.

AWS SysOps

Certifications

Certified Ethical Hacker

EC-Council · May 2019

Reconnaissance, vulnerability analysis, system and web-application attacks, and the defences that stop them.

CEH