Policy-enforced AI computers on Kubernetes (sandbox jobs + audit + deterministic control plane).
-
Updated
Jul 22, 2026 - Python
Policy-enforced AI computers on Kubernetes (sandbox jobs + audit + deterministic control plane).
Produces a set of network policies, given a json describing the connectivity in a given cluster
Deliver a production-ready Kubernetes platform for running governed AI agents with auditability, safety, and operational control.
Kubernetes from zero to practical: 29 hands-on lessons on Minikube, 13 labs with 14 troubleshooting problems, challenges, Helm and a production-style capstone. Every command tested in CI.
Six-layer security observability platform for OpenShift/Kubernetes: OVN-Kubernetes flow analysis, statistical + ML anomaly detection (Isolation Forest), 8-rule NetworkPolicy compliance auditing, and an on-cluster LLM (Ollama/llama3.2:3b) for zero-data-egress security insights. PFE project, TEK-UP x NextStep IT.
Kubernetes security hardening repo with Pod Security Standards, NetworkPolicies, RBAC, Kyverno, OPA, secrets, and CI gates.
Local-first Kubernetes security lab for workload hardening, runtime detection, centralized telemetry, and detection engineering.
Kubernetes NetworkPolicy generator and validator with Gemini-assisted policy drafts and GitOps safety metadata.
Kubernetes hardening baseline: tested Kyverno policies, Pod Security Admission restricted namespace, default-deny NetworkPolicy with DNS and a hardened Deployment. Audit-first, kubeconform + kyverno test in CI. MIT.
Шаблон одноузлового k3s: Helm, Argo CD (GitOps) и изоляция сети. Подставьте свой backend и frontend.
k3s HA 可观测性平台 + Keep AI 告警分析实践档案:完整部署手册、9 个告警 workflow(含自动修复护栏)、飞书告警适配器、踩坑实录|AIOps practice archive on a 3-node k3s HA lab: deployment guide, Keep AI alert workflows with guarded auto-remediation, Feishu adapter & hard-won pitfalls
Kubernetes manifest audit that reads relationships, not just objects: 37 deterministic rules across workloads, RBAC and cross-resource analysis. Zero dependencies, SARIF, MCP server.
Kubernetes hardening lab featuring restricted Pod Security, least privilege, default-deny networking, and policy regression tests.
Read-only checker for Kubernetes AI-agent workloads. Flags a missing gVisor runtime class, service-account token automount, privileged or root containers, host namespaces, missing limits, and missing metadata or RFC1918 egress NetworkPolicy.
Repository featuring a Python script to list and sort Adobe's GitHub repositories by update time, alongside a system design for deploying an Nginx web app on Kubernetes, including security considerations and configuration examples.
Kubernetes platform lab on k3d: Terraform, Helm, Argo CD (GitOps), Vault + External Secrets, Prometheus/Loki/Jaeger observability, NetworkPolicies, HPA, CI gates and a Python AIOps triage bot. Based on Weaveworks Sock Shop.
To associate your repository with the networkpolicy topic, visit your repo's landing page and select "manage topics."