Senior DevOps engineer. I run hybrid infrastructure: bare-metal Linux and Hyper-V on-prem, AWS for public services, Kubernetes on both (Kubespray and EKS), GitOps with Argo CD and Helm. Terraform for cloud resources, Ansible for the bare-metal fleet.
I also run AI coding agents every day and write about what survives production.
Why pay for Grok Bot or ChatGPT Dots? Run your own for free.
Botstead is an open-source, self-hosted hub for AI bots. Each bot gets its own container and its own browser, and you can take over its screen at any moment. Bring the models you already have: Claude Code, Codex or Antigravity subscriptions, OpenRouter, or any OpenAI-compatible endpoint.
- Bots with roles, memory, schedules, and recorded procedures they can replay without a model
- Group chats where bots debate each other and reach a conclusion
- Approvals for risky actions, an activity feed, and per-bot cost tracking
- Telegram, Slack, GitHub, and email triggers, plus a PWA for desktop and phone
Python FastAPI Postgres Docker Apache-2.0
|
Recovers a Helm release stuck with "another operation (install/upgrade/rollback) is in progress". Checks that the operation is really dead before it rolls back, and refuses when it cannot tell. Tested end to end on Helm 3 and Helm 4.
|
kubectl plugin that explains why a container or pod died or restarted: the last termination of each container, the mechanism behind it, and the evidence with a confidence label. Checked end to end on kind with 24 failure scenarios.
|
|
Explains which rule added or dropped a GitLab CI job, clause by clause, with the variable values it used. Its answers are compared with a real GitLab on every release.
|
Self-service portal for temporary PostgreSQL and ClickHouse credentials on top of HashiCorp Vault's database secrets engine.
|
|
Read-only explanation of what an Argo CD Application is waiting for, why a sync failed, or why it is out of sync, with the fields each statement comes from. Checked on every release against two Argo CD versions on kind.
|
Read-only report of what fills Docker's disk on a GitLab Runner host: cache volumes by project, build containers, images without double-counted layers, build cache. Checked on every release against a real GitLab and a real runner.
|
|
Read-only map of the KV paths a Vault or OpenBao token can list, with its capabilities on each path. It never reads secret payloads; every request is checked against an allowlist and verified against the server's audit log in tests.
|
Sits between Alertmanager and Slack: one message per alert group, updated in place, with Silence buttons. A silence covers the labels common to the group's alerts and is created only after the Slack signature and a user allowlist are checked.
|
|
Claude Code plugin for the workflow behind these tools: the main session plans, a cheaper model writes the code, and an independent stronger model judges it by running it. Includes a plan critic and a local log of verdicts.
|
Ten copy-paste starters (Ansible, Terraform, Argo CD, Vault, RabbitMQ, Redis, Kafka and others). Each one ships a test that reproduces the production trap it avoids.
|
Cloud and IaC 
Kubernetes and delivery 
Data and secrets 
-0d1017?style=flat-square&logo=postgresql&logoColor=ff6b5e){kind=icon}
Observability and code 
