Staff SRE at HiveMQ, based in Milan (CET). I build Kubernetes platforms with reliability as a core pillar, and I am a CNCF Kubestronaut.
Most of my day-to-day work lives in private repositories. This is what I can show:
- kube-on-the-cheap: my homelab, run like production on a hobby budget. Two Kubernetes clusters (Talos on-prem, OKE on the Oracle Cloud free tier) on a Tailscale tailnet, provisioned with Terragrunt and reconciled with Flux.
- crd-schema-extractor: a Go tool that pulls CRDs from Helm charts (HTTP and OCI), release manifests and GitHub archives, and turns them into standalone JSON Schemas with provenance metadata and a CycloneDX SBOM.
- crd-schemas: the extractor's output, versioned per upstream release and ready for kubeconform to validate custom resources in CI.
- nix: my machines, declared in Nix.