morbidsteve/sre-platform
Summary
"Secure Runtime Environment" — hardened, compliance-ready Kubernetes platform for regulated environments. GitOps-driven with 16 integrated components.
Tech Stack
Kubernetes (RKE2), Flux CD, Istio, Kyverno, Prometheus, Loki, Tempo, NeuVector, OpenBao, Keycloak, Harbor, Velero, Terraform
Key Contents
- Complete K8s platform stack for regulated environments
- Zero-trust networking (Istio mTLS)
- Policy enforcement (Kyverno)
- Centralized logging (Loki), secrets (OpenBao), SSO (Keycloak)
- docs/: architecture, security guide, airgap guide, operator guide, Proxmox getting started
- policies/ and infrastructure/ folders (READMEs)
Verdict: USEFUL ⭐⭐⭐
Relevant for DIB contractors needing compliant infrastructure. Particularly useful given Sean's Proxmox homelab — has Proxmox getting-started guide. Covers many CMMC technical controls (AC, AU, IA, SC).