Patty
Randriambololona. Je construis les plateformes qui livrent vite, et en sécurité.I build platforms that ship fast, and safely.

# Chemin d'une requête publiquePath of a public request
Navigateur ─HTTPS─▶ Cloudflare edge
  ─tunnel─▶ cloudflared
  ─HTTP :30080─▶ Traefik
  ─▶ Authelia ─▶ IngressRoute
  ─▶ Service ─▶ Pod

# Cible type d'une missionTypical mission target
cloud     AWS · GCP · Azure · Proxmox
runtime   K3s · AKS · EKS · GKE
secrets   Vault PKI
delivery  GitLab CI → Helm → ArgoCD

resource "proxmox_virtual_environment_vm" "vms" {
  for_each  = var.vms
  name      = each.value.name
  node_name = var.proxmox_node

  clone {
    vm_id = var.template_vm_id
  }
  cpu {
    cores = each.value.cores
    type  = "host"
  }
}

# puis la configurationthen configuration
$ ansible-playbook homelab_k3s.yml

access_control:
  default_policy: 'deny'
  rules:
    # ce site : publicthis site: public
    - domain: 'home.patsoocloudlab.fr'
      policy: 'bypass'
    # tout le reste : SSO obligatoireeverything else: SSO required
    - domain_regex: '^.*\.patsoocloudlab\.fr$'
      policy: 'one_factor'

# + Cloudflare Zero Trust · Vault PKI · LDAP

build_projet:
  stage: build
  script:
    - docker build --pull -t $CONTAINER_BUILD_IMAGE .
    - docker push $CONTAINER_BUILD_IMAGE
    - docker tag $CONTAINER_BUILD_IMAGE $DOCKERHUB_LATEST_IMAGE
    - docker push $DOCKERHUB_LATEST_IMAGE

# puis sur le clusterthen on the cluster
$ kubectl rollout restart deployment/blog -n default
deployment.apps/blog restarted

# taux d'erreurs 5xx servies par Traefikshare of 5xx served by Traefik
sum(rate(traefik_service_requests_total{code=~"5.."}[5m]))
  / sum(rate(traefik_service_requests_total[5m]))

# logs d'une app, dans Lokian app's logs, in Loki
{namespace="default", app="blog"} |= "error"

# alertes vers Gotify et Telegramalerts to Gotify and Telegram