Skip to content
View bloogefest's full-sized avatar
18 followers · 102 following

Achievements

Achievement: YOLOAchievement: Pull Sharkx2

Achievements

Achievement: YOLOAchievement: Pull Sharkx2

Organizations

@sogeor

Block or report bloogefest

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
bloogefest/README.md

George Sopin

DevOps engineer with a development background. I set up delivery from commit to cluster and run the cluster itself. Led a development team on a commercial project, and still write the services that live in the infrastructure I build.

Software Engineering student at RTU MIREA, Moscow. Writing code since 2020.

Infrastructure

Kubernetes Linux Istio Calico cert-manager containerd cri-o MetalLB Flannel Nginx Proxmox Packer Ansible Talos Linux cloud-init WireGuard Hyper-V

Hand-provisioned with kubeadm: a 5-node cluster with a 3-master HA control plane.

Golden VM images for Proxmox built with Packer: Ubuntu autoinstall, Kubernetes node images, Talos Image Factory schematics. Every template is tested by booting a clone.

Delivery

GitHub Actions Docker Git Nexus Bash Renovate pre-commit

From commit to cluster in one pipeline: tests, image builds with Docker Buildx, publishing to a self-hosted registry, rollout to Kubernetes.

Security & supply chain

OpenSCAP Trivy goss gitleaks ShellCheck zizmor OpenSSF Scorecard

Images scanned against the CIS Level 1 benchmark with OpenSCAP and for CVEs with Trivy, verified with goss. Hardened CI: actions pinned by SHA, minimal permissions, secrets scoped to protected environments; the cloud runner reaches the lab only through a per-job WireGuard peer, nothing is exposed to the internet. OpenSSF Best Practices passing badge and Scorecard.

Data & observability

PostgreSQL Kafka Prometheus Grafana Keycloak MongoDB CloudNativePG Strimzi Alertmanager MySQL

Stateful workloads through operators, not hand-written manifests. SSO on Keycloak, internal dashboards behind OAuth2 Proxy.

Development

Java Spring C++ C Python Rust JUnit OpenAPI Gradle Maven CMake NASM GAS FASM

Microservices in Java with Spring Boot. Systems code in C and C++: freestanding environments without libc, manual memory management, ELF and the linker.

Pinned Loading

  1. sogeor/.github sogeor/.github Public

    Sogeor organization profile, community health files and issue forms

    Shell

  2. sogeor/workflows sogeor/workflows Public

    Reusable GitHub Actions workflows for Sogeor repositories: linting, PR title checks and releases

  3. sogeor/tofu sogeor/tofu Public

    OpenTofu stacks for Sogeor: server inventory for Ansible, Cloudflare DNS and OpenBao configuration

    HCL

  4. sogeor/ansible sogeor/ansible Public

    Ansible playbooks for Sogeor servers: bootstrap, OS hardening, WireGuard, kubeadm, Cilium and Flux, backups, status page

    Shell

  5. sogeor/brand sogeor/brand Public

    Sogeor brand assets: logo, colors and usage guidelines

    Shell

  6. sogeor/template sogeor/template Public template

    Template for new Sogeor repositories: license, community files, linters, pre-commit, SOPS, Renovate and release-please

    Shell