Projects

Hardened OpenCode server container image, optimized with buildah for minimal layers, with automated CI/CD for running it on a remote host or Kubernetes cluster. Multi-arch Alpine/Debian variants with signed images, Helm chart, and security hardening (non-root, tini, cosign keyless signing).

Contribution to ansible-collections/community.general adding zstd compression support to the archive module. Unit tests, integration tests, and changelog fragment included. All while meeting the repo's strict code quality standards.

GitHub Action to push container images or manifests to registries (Dockerhub, GHCR, OpenShift). Supports podman push authentication, TLS verification, and digest tracking. Forked from redhat-actions/push-to-registry.

Karpenter provider for UpCloud enabling just-in-time Kubernetes node autoscaling. Provisions UpCloud servers via cloud-init with kubeadm join, supports scale-from-zero, cost-aware bin-packing, and cached instance pricing.

OpenTofu community provider for managing UpCloud products (servers, storage, networking). Fork of the upstream Terraform provider to include missing features.

GitHub Action to build container images using buildah, maintained under the aardbol-actions organization. Modernized ESLint config, updated dependencies, and security fixes.

Collection of shared tools for GitHub Action development: action-io-generator (validates input/output consistency), bundle-verifier (checks committed bundles), commit-data (Docker Action), and shared TypeScript/ESLint/Webpack configs.

GitHub Action that validates Kubernetes manifest files. I added folder, Helm chart template and devcontainer support.

Kubernetes CSI driver for UpCloud Block & File Storage. Added online volume expansion, File Storage support, Helm chart with OCI publishing, snapshot support, Prometheus metrics, and hardened security. Implemented latest CSI spec requirements.

A cert-manager DNS01 webhook provider built in Go to automate ACME certificate issuance and internal PKI lifecycle management.