Skip to content
Open Source

Open source contributions

Nearly all of these started the same way: something in a cluster behaved differently than the docs suggested, I went looking in the source, and the fix was small enough to send upstream. The links below go straight to my pull requests in each repository.

Open Cluster Management

OCM is the hub-and-spoke control plane behind most of my multi-cluster work: a hub cluster holds the intent, agents on managed clusters apply it. These are the components I have sent patches to.

  • ocm

    Open Cluster Management: the hub/spoke control plane behind much of my multi-cluster work.

  • clusteradm

    CLI for bootstrapping and joining clusters to an OCM hub.

  • ocm/api

    The shared API types every OCM component builds against.

  • cluster-proxy

    Reverse tunnels that let a hub reach managed clusters behind NAT or firewalls.

  • managed-serviceaccount

    Projects service account tokens from managed clusters back to the hub.

  • multicluster-controlplane

    A standalone, lightweight control plane for multi-cluster deployments.

  • cluster-gateway

    API gateway that proxies requests from a hub cluster to managed clusters.

Cluster runtimes, policy and identity

Projects that decide what runs in a cluster and who is allowed to ask for it. The same problems I work on inside a product, seen from upstream.

  • k3s-io/k3s

    Lightweight, certified Kubernetes distribution used widely at the edge.

  • loft-sh/vcluster

    Virtual Kubernetes clusters that run inside a namespace of a host cluster.

  • kyverno

    Policy engine for Kubernetes: admission controls expressed as Kubernetes resources.

  • kubevirt

    Runs virtual machine workloads alongside containers on Kubernetes.

  • openfga

    Relationship-based authorization engine, in the same problem space as cluster RBAC.

Observability and data

The storage and dashboard layer under the multi-tenant monitoring system I help build.

  • clickhouse

    The official Go client for ClickHouse, which backs the metrics storage I work with.

  • perses

    CNCF dashboard and visualization project used for the multi-tenant monitoring UI.

My own repositories

Alongside upstream patches I maintain a few projects of my own: a Kubernetes operator that centralizes cluster authentication, and a Go marketplace service for asynchronous application deployments. Both are on GitHub.

Case study: Cluster Auth Manager

Related