Lucas Barros lbarrosby

Lucas Barros

Platform engineer based in Rio de Janeiro. I design and operate Kubernetes platforms for teams that ship to production every day, mostly in financial services.

Over the last years that meant running a fleet of 330 clusters behind ArgoCD, Atlantis and Rancher, turning EKS provisioning from a two-day manual process into a 40-minute Terraform/Terragrunt pipeline, moving a 3,000 jobs/day Jenkins farm to immutable infrastructure, and treating cloud cost as an engineering metric rather than a finance report.

I care about boring, predictable infrastructure: everything in code, every change reviewed, upgrades that nobody notices.

Open source

Contributing upstream across the cloud native ecosystem: CNCF projects like Kubernetes, Envoy, Prometheus, Argo, Crossplane, Headlamp and CoreDNS, plus Terraform providers, Helm charts and AI infrastructure tooling (NVIDIA device plugin, Ray, deepwiki-open).

Merged · official CNCF project repositories first · filter and search

Official CNCF Graduated projects · 4 merged in 3 repos

Project	Pull request	Merged	Merged by	Kind words
coredns/coredns	plugin/acl: only add the EDE OPT record when the request has EDNS	2026-11-07	@yongtang
fluent/fluentd	parser_syslog, in_syslog: fix handling of a priority on a later line	2026-11-06	@Watson1978	🙏 @Watson1978: "Thanks!"
fluent/fluentd	record_accessor: raise ConfigError for a non-integer array index	2026-11-06	@Watson1978	🙏 @Watson1978: "Thanks!"
rook/rook	osd: don't wipe metadata devices of existing OSDs	2026-11-05	@arttor	🙏 @arttor: "thanks for the fix."

Official CNCF Incubating projects · 2 merged in 1 repos

Project	Pull request	Merged	Merged by	Kind words
lima-vm/lima	limactl edit: warn when changing the VM type of an existing instance	2026-11-05	@AkihiroSuda
lima-vm/lima	limayaml: don't panic when the latest config fails to load	2026-11-05	@unsuman	🙏 @AkihiroSuda: "Thanks"

Official CNCF Sandbox projects · 4 merged in 1 repos

Project	Pull request	Merged	Merged by	Kind words
kubernetes-sigs/headlamp	backend: auth: Accept a single string groups claim in /me	2026-11-05	@skoeva	🙏 @skoeva: "lgtm, thanks"
kubernetes-sigs/headlamp	frontend: resourceMap: Resolve HTTPRoute parent and backend refs	2026-11-04	@skoeva
kubernetes-sigs/headlamp	frontend: util: Use desired DaemonSet pods as the total	2026-11-04	@skoeva
kubernetes-sigs/headlamp	frontend: resourceMap: Match NetworkPolicy podSelector fully	2026-11-04	@skoeva

CNCF ecosystem (Helm charts, plugins, SIG subprojects, not the main repos) · 48 merged in 21 repos

Project	Pull request	Merged	Merged by	Kind words
kubernetes-sigs/agent-sandbox	fix(go-sdk): apply RequestTimeout to Run on sandboxd	2026-11-08	bot
kubernetes-sigs/agent-sandbox	fix(sandboxd): delete a symlink itself, not its target	2026-11-08	bot
kubernetes-sigs/agent-sandbox	fix(sandbox-router): keep the request body open across dial retries	2026-11-06	bot
kubernetes-sigs/cluster-inventory-api	access: do not modify the provider exec config	2026-11-06	bot	🙏 @kahirokunn: "Thx!"
kubernetes-sigs/cluster-inventory-api	access: sort profile-sourced exec env vars by name	2026-11-06	bot	🙏 @kahirokunn: "Thx 🙏"
kubernetes-sigs/dra-example-driver	Reject GPU sharing configs that omit the strategy config instead of panicking	2026-11-05	bot
kubernetes-sigs/external-dns	refactor(validation): return field.ErrorList from config validators	2026-11-06	bot	🙏 @Kunalbehbud: "thanks for picking this up, I never got back to the rebase."
kubernetes-sigs/gateway-api-inference-extension	fix(lwepp): respond with 503 when no endpoint is eligible	2026-11-06	bot	🙏 @nicolexin: "Thanks for fixing this!"
kubernetes-sigs/jobset	helm: default the ServiceMonitor client cert to the release's metrics secret	2026-11-07	bot
kubernetes-sigs/jobset	Reject a ReplicatedJob that depends on itself	2026-11-06	bot	🙏 @kannon92: "thank you!"
kubernetes-sigs/kubebuilder	🐛 (API): keep the target's line endings in UncommentCode and CommentCode	2026-11-07	bot	🙏 @camilamacedo86: "Thank you for raise this one 👍"
argoproj/argo-helm	fix(argo-cd): render server.service.externalIPs as a list	2026-11-07	@tico24
argoproj/argo-helm	fix(argocd-image-updater): Allow webhook port in NetworkPolicy when service.enabled is set	2026-11-06	@tico24
argoproj/argo-helm	fix(argocd-image-updater): mount the secret created by certificateSecret	2026-11-06	@tico24
coredns/helm	fix: default the server port when it is not set	2026-11-06	@hagaibarel	🙏 @hagaibarel: "Thanks for the PR!"
coredns/helm	docs: note that the ServiceMonitor needs the metrics Service	2026-11-04	@hagaibarel	🙏 @hagaibarel: "Thanks for the PR!"
falcosecurity/falcosidekick	fix(outputs): sanitize Loki label names built from output fields	2026-11-08	bot
falcosecurity/falcosidekick	fix(outputs): log the right error for 500 and 502 responses	2026-11-08	bot
falcosecurity/falcosidekick	fix(outputs): escape special characters in the InfluxDB line protocol payload	2026-11-06	bot
falcosecurity/falcosidekick	fix(handlers): skip outputs whose client was not created	2026-11-06	bot
fluent/fluent-operator	fix(helm): honor logstashFormat: false in the Elasticsearch ClusterOutput	2026-11-05	@joshuabaird	🙏 @joshuabaird: "Thanks, this looks good."
fluent/fluent-plugin-kafka	ci: Stop workflows from inheriting the repository default token permissions	2026-11-07	@Watson1978	🙏 @Watson1978: "Thanks for the follow-up to #550."
fluent/fluent-plugin-kafka	out_kafka2: Unsubscribe ActiveSupport notifications on shutdown	2026-11-05	@Watson1978	🙏 @Watson1978: "Thanks for the fix."
fluent/fluent-plugin-kafka	in_kafka_group, in_rdkafka_group: Fix records skipped with time_source record	2026-11-05	@Watson1978	🙏 @Watson1978: "Thanks for porting the #592 handling to both group inputs."
fluent/fluent-plugin-opensearch	Add client_chain to send intermediate certificates with excon	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for working on this."
fluent/fluentd-kubernetes-daemonset	Fix FLUENT_CONTAINER_TAIL_EXCLUDE_PATH in JSON array format	2026-11-06	@kenhys	🙏 @kenhys: "Thanks."
fluent/fluentd-kubernetes-daemonset	Fix kafka, kafka2 and kinesis settings that are empty when unset	2026-11-06	@kenhys
fluent/fluentd-kubernetes-daemonset	Fix entrypoint.sh exiting early on elasticsearch and opensearch images	2026-11-06	@kenhys	🙏 @kenhys: "Thanks!, it seems that it is reasolable fix."
kedacore/charts	fix: document nanos as the zap time encoding value	2026-11-07	@linkvt	🙏 @linkvt: "Thanks again!"
knative/eventing	fix(trigger): track the subscriber with the Trigger as observer	2026-11-06	bot
open-feature/java-sdk-contrib	fix(flagd): stop the FlagStore streamer thread on shutdown	2026-11-06	@toddbaert
openebs/lvm-localpv	feat(chart): allow extra args for the controller CSI sidecars	2026-11-05	bot
openebs/zfs-localpv	fix(rbac): limit zfs controller access to namespaces to read-only	2026-11-06	bot
openebs/zfs-localpv	fix(helm): render zfsNode and zfsController updateStrategy	2026-11-06	bot
project-zot/helm-charts	fix(zot): stop sending authHeader on the health probes	2026-11-08	@andaaron	🙏 @andaaron: "Thank you for the PR"
project-zot/helm-charts	fix(zot): select the service namespace in the ServiceMonitor	2026-11-07	@andaaron
prometheus-community/helm-charts	[prometheus-stackdriver-exporter] Fix NOTES for the current values	2026-11-09	@rpahli
prometheus-community/helm-charts	[prometheus-nats-exporter] Render extraContainers in the Deployment	2026-11-06	@okgolove
prometheus-community/helm-charts	[prometheus-rabbitmq-exporter] Fix service.labels rendering	2026-11-06	@monotek
prometheus-community/helm-charts	[prometheus-pingdom-exporter] Fix ServiceAccount annotations indentation	2026-11-05	@monotek
prometheus-community/helm-charts	[prometheus-mysql-exporter] Honor cloudsqlproxy.image.pullPolicy	2026-11-05	@monotek
prometheus-community/helm-charts	[prometheus-pgbouncer-exporter] Fix ServiceAccount annotations and NetworkPolicy labels rendering	2026-11-05	@zeritti
prometheus-community/helm-charts	[prometheus-pushgateway] Fix accessModes indentation in StatefulSet volumeClaimTemplates	2026-11-05	@zeritti
prometheus-community/helm-charts	[prometheus-postgres-exporter] fix indentation of serviceAccount annotations and networkPolicy labels	2026-11-05	@zeritti
prometheus-community/helm-charts	[prometheus-nginx-exporter] fix ServiceMonitor rendering of labels, targetLabels and relabelings	2026-11-05	@zeritti
prometheus-community/helm-charts	[prometheus-pgbouncer-exporter] Pass config.extraArgs to the exporter	2026-11-05	@zeritti
prometheus-community/helm-charts	[prometheus-blackbox-exporter] Set port names on self ServiceMonitor endpoints	2026-11-05	@monotek
prometheus-community/helm-charts	[prometheus-operator-admission-webhook] Fix serviceMonitor.metricRelabelings value name	2026-11-05	@zeritti

Other projects · 74 merged in 30 repos

Project	Pull request	Merged	Merged by	Kind words
adriannovegil/awesome-observability	Add AI observability pack to GPU Observability	2026-11-07	@adriannovegil	🙏 @adriannovegil: "Thanks for the contribution!"
adriannovegil/awesome-observability	Add RKE2 observability pack to Dashboarding	2026-11-07	@adriannovegil	🙏 @adriannovegil: "Thanks for the contribution!"
aminueza/terraform-provider-minio	fix(server_side_encryption): ignore kms_key_id diff for AES256	2026-11-08	@felladrin	🙏 @felladrin: "Thanks!"
aminueza/terraform-provider-minio	fix(server_side_encryption): report read errors instead of dropping from state	2026-11-08	@felladrin	🙏 @felladrin: "Thanks!"
aminueza/terraform-provider-minio	fix(kms_key): report read errors instead of dropping the key from state	2026-11-07	@felladrin	🙏 @felladrin: "Thanks for this one too!"
aminueza/terraform-provider-minio	fix(object_tags): remove from state when the object or bucket is gone	2026-11-07	@felladrin	🙏 @felladrin: "Thanks for the fix!"
aminueza/terraform-provider-minio	fix(replication): change a rule's target bucket on the same endpoint	2026-11-07	@aminueza
aminueza/terraform-provider-minio	fix(replication): set the ID before removing unused remote targets	2026-11-06	@aminueza	🙏 @aminueza: "Thanks, nice test with the stub server."
aminueza/terraform-provider-minio	fix(replication): reject two rules on the same target endpoint	2026-11-05	@aminueza
ansible-collections/community.proxmox	fix(proxmox_vm_info): return network info without requiring config	2026-11-07	@Thulium-Drake	🙏 @Thulium-Drake: "Thanks for this work!"
ansible-collections/community.proxmox	fix(proxmox_kvm): return newid when the clone target already exists	2026-11-07	@Thulium-Drake	🙏 @Thulium-Drake: "Thanks for this work!"
AsyncFuncAI/deepwiki-open	fix: export wikis whose repository name is not ASCII	2026-11-08	@sng-asyncfunc
AsyncFuncAI/deepwiki-open	fix: match file filters against paths relative to the repository root	2026-11-06	@sng-asyncfunc
AsyncFuncAI/deepwiki-open	feat: add Helm chart	2026-11-04	@sng-asyncfunc
bloomberg/causal-ts	Fix lag-0 mirror marks counted as edges in graph comparison plots	2026-11-06	@fesanghary	🙏 @fesanghary: "Thanks for the clear report and fix!"
bpg/terraform-provider-proxmox	fix(access)!: fail to create an acl that already exists	2026-11-09	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Nice one, and thanks for the clean test!"
bpg/terraform-provider-proxmox	chore(docs): add example and import usage to linux_bond	2026-11-09	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Thanks for filling this gap!"
bpg/terraform-provider-proxmox	chore(docs): describe startup down_delay as a shutdown timeout	2026-11-09	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Thanks for the fix!"
bpg/terraform-provider-proxmox	chore(test): accept go test -run patterns in testacc	2026-11-09	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Thanks for picking this up so quickly!"
bpg/terraform-provider-proxmox	fix(acme): remove dns plugin from state when deleted outside terraform	2026-11-08	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Thanks for this one too!"
bpg/terraform-provider-proxmox	fix(vm): read back usb4 and higher host USB devices	2026-11-08	@bpg-dev	🙏 @bpg-dev: "Hey 👋🏼 Thanks for the clean fix!"
deliveryhero/helm-charts	[stable/rds-downscaler]: use the chart service account and fix podLabels/imagePullSecrets rendering	2026-11-06	@max-rocket-internet
deliveryhero/helm-charts	[stable/kubecost-reports-exporter]: use the chart service account and render scheduling values	2026-11-06	@max-rocket-internet	🙏 @max-rocket-internet: "Thanks 💚"
deliveryhero/helm-charts	[stable/dregsy]: fix podLabels value name and render it on Deployment pods	2026-11-06	@max-rocket-internet	🙏 @max-rocket-internet: "Nice, thanks"
fluent-plugins-nursery/fluent-plugin-cloudwatch-logs	Fix metadata log_group_name showing the prefix instead of the matched log group	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for the fix."
fluent-plugins-nursery/fluent-plugin-cloudwatch-logs	Fix NameError when log_group_aws_tags or retention_in_days is set with its _key parameter	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for the fix."
fluent-plugins-nursery/fluent-plugin-cloudwatch-logs	Fix InvalidParameterException when a record has an empty log group or stream name	2026-11-08	@Watson1978	🙏 @Watson1978: "Thanks for the fix."
fluent-plugins-nursery/fluent-plugin-concat	Fix events lost when the timeout flush races with incoming events	2026-11-09	@Watson1978
fluent-plugins-nursery/fluent-plugin-concat	Fix streams mixing when the tag or identity contains a colon	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for the fix."
fluent-plugins-nursery/fluent-plugin-concat	Fix timeout flush truncating tags that contain a colon	2026-11-06	@Watson1978
fluent-plugins-nursery/fluent-plugin-out-http	Send the intermediate certificates of client_cert_path	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for the fix and the clear tests."
fluent-plugins-nursery/fluent-plugin-remote_syslog	Parse IPv6 addresses in host_with_port	2026-11-09	@Watson1978	🙏 @Watson1978: "Thanks for working on this."
helmfile/helmfile	docs: list the env vars that disable insecure template functions and hooks	2026-11-09	@yxxhero
helmfile/helmfile	fix: let a later --state-values-set assignment replace a value of another type	2026-11-08	@yxxhero
helmfile/helmfile	fix: return the default from get when a parent value is nil	2026-11-06	@yxxhero
helmfile/helmfile	fix: keep elements added to an existing array by --state-values-set	2026-11-06	@yxxhero
hetznercloud/hcloud-cloud-controller-manager	fix(load-balancer): trim spaces in comma separated annotations	2026-11-05	@lukasmetzner	🙏 @lukasmetzner: "Hey, thank you for the contribution."
jenkinsci/explain-error-plugin	fix: keep "-- " and "++ " lines in auto-fix diffs and end created files with a newline	2026-11-08	@shenxianpeng	🙏 @shenxianpeng: "Thanks for your PR!"
jenkinsci/helm-charts	feat(jenkins): add agent.useJenkinsProxy for the Kubernetes cloud	2026-11-08	@timja
jenkinsci/helm-charts	fix(jenkins): read the documented controller.clusterIP value	2026-11-06	@timja
kokuwaio/helm-charts	fix(mysqldump): keep the OpenStack password when mysql.existingSecret is set	2026-11-08	@monotek
kokuwaio/helm-charts	fix(nginx-php-fpm): use php.livenessProbe for the php container	2026-11-08	@monotek
kokuwaio/helm-charts	fix(mysqldump): read the GCS key file from where it is mounted	2026-11-08	@monotek
kokuwaio/helm-charts	fix(mysqldump): keep the s3 and ssh upload steps on their own line	2026-11-06	@monotek
kokuwaio/helm-charts	fix(nginx-php-fpm): point the HPAs at the nginx and php deployments	2026-11-06	@monotek
kubecolor/kubecolor	fix: honor =false on --no-headers, --watch, --follow and --interactive	2026-11-08	@applejag
kubecolor/kubecolor	fix: handle YAML block scalars in sequence items and with "\|2-" headers	2026-11-08	@applejag	🙏 @applejag: "Thank you for this!"
kubecolor/kubecolor	fix: keep coloring YAML block scalars across blank lines	2026-11-08	@applejag	🙏 @applejag: "Thank you for this!"
kubecolor/kubecolor	fix: match -o json and -o yaml case-insensitively like kubectl	2026-11-06	@applejag	🙏 @applejag: "Very much an edge case, but it does make it more correct Thank you!"
linode/linode-cloud-controller-manager	[fix] trim whitespace and skip empty entries in linode-loadbalancer-tags	2026-11-06	@komer3	🙏 @komer3: "Thanks for contribution :)"
luthermonson/go-proxmox	fix(vm): return the API error from AgentExec	2026-11-07	@luthermonson
luthermonson/go-proxmox	ci: pin actions by SHA and set read-only token permissions	2026-11-07	@luthermonson
luthermonson/go-proxmox	fix(firewall): send force and digest when deleting guest ipsets	2026-11-07	@luthermonson
oliver006/redis_exporter	fix: count usec for commands with _ or - in the latency histogram sum	2026-11-06	@oliver006	🙏 @oliver006: "Thanks for the PR!"
openobserve/openobserve-helm-chart	fix(openobserve-collector): apply image.pullPolicy to the collectors	2026-11-05	@mmosarafO2
openobserve/terraform-provider-openobserve	fix: keep the configured JSON text when the server document matches	2026-11-05	@chaitanya-sistla	🙏 @chaitanya-sistla: "Thanks."
samber/awesome-prometheus-alerts	feat(rules): add NVIDIA GPU (dcgm-exporter) alerts	2026-11-08	@samber	🙏 @samber: "Thanks for this contrib"
samber/awesome-prometheus-alerts	feat(rules): add vLLM alerts	2026-11-07	@samber
sergelogvinov/proxmox-cloud-controller-manager	fix: remove the right addresses when several are ignored	2026-11-05	@sergelogvinov	🙏 @sergelogvinov: "Thank you"
sergelogvinov/proxmox-cloud-controller-manager	fix: keep ip_sort_order cidrs out of the ignore list	2026-11-05	@sergelogvinov	🙏 @sergelogvinov: "Thank you!"
stern/stern	Harden GitHub Actions workflows	2026-11-08	@superbrothers	🙏 @superbrothers: "Thank you for the PR!"
stern/stern	fix: compile the highlight regexp once per tail	2026-11-08	@superbrothers	🙏 @superbrothers: "Thank you for your contribution!"
terraform-linters/tflint	formatter: omit helpUri in SARIF output when a rule has no link	2026-11-08	@wata727	🙏 @wata727: "Thanks!"
tsuru/charts	fix(tsuru-prometheus-pool): honor securityContext from values	2026-11-05	@ravilock
tsuru/charts	ci: publish charts as OCI artifacts to GHCR	2026-11-05	@ravilock
tsuru/tsuru-client	fix: keep the current target in sync on target update	2026-11-04	@ravilock
vantage-sh/ec2instances.info	fix(ec2): correct CUDA compute capability for g6f, gr6f and p6-b300	2026-11-08	@alex-wanger	🙏 @alex-wanger: "Looks good to me, thanks for submitting this!"
xorbitsai/inference	fix(client): read image file paths in image_to_video and flf_to_video	2026-11-08	@qinxuye
xorbitsai/inference	fix(llm): download each DeepSeek-VL2 image from its own URL	2026-11-08	@qinxuye
xorbitsai/inference	fix(video): run Wan2.2 image-to-video without max_area or image encoder	2026-11-08	@qinxuye
xorbitsai/inference	fix(image): surface save errors for url responses	2026-11-07	@qinxuye
xorbitsai/inference	fix(image): apply default_generate_config to inpainting	2026-11-07	@qinxuye
xorbitsai/inference	fix(image): pad every image when padding_image_to_multiple is set	2026-11-07	@qinxuye
xorbitsai/inference	fix(video): resize the last frame to the first frame's size	2026-11-07	@qinxuye

In review · sorted by CNCF maturity

Official CNCF Graduated projects · 31 open in 15 repos

Project	Pull requests
argoproj/argo-cd	feat(health): add health checks for Strimzi KafkaMirrorMaker and KafkaMirrorMaker2 (#5048) fix(cli): include argocd-cmd-params-cm in admin export/import (#9506) fix(cli): report server version as unavailable in core mode (#9747)
cert-manager/cert-manager	fix(pki): accept lowercase attribute type names in literalSubject
coredns/coredns	plugin/nsid: copy the DO bit from the request when adding an OPT record plugin/template: only add the EDE OPT record when the request has EDNS plugin/header: keep rules from every header block
crossplane/crossplane	test(e2e): cover CRD hand-off for control planes upgraded from v1.20
falcosecurity/falco	fix(chart): use falcosidekick.listenPort in the Falcosidekick URL
fluent/fluentd	in_tcp: fix inflated output emit_count when a message arrives in several reads
goharbor/harbor	fix: return 404 for role ids outside the int32 range
istio/istio	helm: allow network gateway ports in the gateway NetworkPolicy gateway: honor exportTo when resolving Hostname backendRefs
karmada-io/karmada	fix(resourceinterpreter): skip Ingress TLS entries without secretName in dependencies
kubernetes/autoscaler	cluster-autoscaler/chart: keep PDB minAvailable/maxUnavailable with a custom selector hetzner: map initializing, off and deleting servers to an instance state
kubernetes/cloud-provider-openstack	[occm] Rename listener when its pool already has the new cluster-name
kubernetes/kubernetes	cloud-provider: test route controller triggers and route_sync_total labels
kubernetes/website	[pt-br] Add tasks/configure-pod-container/configure-projected-volume-storage.md [pt-br] Add tasks/configure-pod-container/attach-handler-lifecycle-event.md [pt-br] Add tasks/configure-pod-container/configure-pod-initialization.md [pt-br] Add tasks/configure-pod-container/pull-image-private-registry.md [pt-br] Add tasks/configure-pod-container/assign-cpu-resource.md [pt-br] Add tasks/configure-pod-container/configure-liveness-readiness-startup-probes.md [pt-br] Add tasks/configure-pod-container/assign-memory-resource.md [pt-br] Add concepts/architecture/leases.md
kyverno/kyverno	fix(cel): select the highest-priority exception when priorities are negative fix(dpol): resolve wildcard apiGroups and apiVersions against discovery
rook/rook	helm: render CephBlockPool storage class labels as YAML helm: pass monitoring.metricsDisabled to the CephCluster osd: requeue the disruption controller while a failure domain drains

Official CNCF Incubating projects · 10 open in 4 repos

Project	Pull requests
lima-vm/lima	cidata: only compare the Lima block of /etc/environment cidata: add the user to systemd-journal regardless of UID downloader: don't leave a partial file at the local path limatmpl: strip native arch aliases from image-derived instance names guestagent: don't run kubectl when no kubeconfig is found
litmuschaos/litmus	fix(authentication): check the stored role before letting an owner leave
opencost/opencost	fix(inferencecost): keep only grouped properties when aggregating fix(collector): emit GPU allocation for nvidia.com/gpu.shared requests fix(metrics): scale container_gpu_allocation on time-sliced and vGPU nodes
projectcontour/contour	Set alt_stat_name for DNS name clusters

Official CNCF Sandbox projects · 16 open in 7 repos

Project	Pull requests
external-secrets/external-secrets	fix(bitwarden): honor name.regexp in GetAllSecrets find
k8sgpt-ai/k8sgpt	fix: require a namespace for namespaced kinds in MCP get-resource fix: declare the limit parameter on the MCP list-resources tool
kaito-project/kaito	fix: read max-model-len from inference_config.yaml with a YAML parser
kube-vip/kube-vip	fix(services): do not treat DHCP placeholder VIPs as shared
kubernetes-sigs/headlamp	frontend: resourceMap: Use targetRefs for backend policy relations
metallb/metallb	layer2: watch announced IPs on NDP responders created later config: detect duplicate BGPPeers that only differ by name
runatlantis/atlantis	fix: don't discard approvals for a plan with no projects fix: delete plan directories on unlock fix: stop Atlantis from replying to its own comments fix: keep the policy_check status when approve_policies finds no projects fix: keep successful plans when the disable automerge label is set docs: drop push events from the GitLab webhook setup fix: read pre-v0.44.0 pull records with int policy approvals fix: reject targeted plan for a missing dir before creating its status

CNCF ecosystem (Helm charts, plugins, SIG subprojects, not the main repos) · 115 open in 57 repos

Project	Pull requests
argoproj/argo-helm	fix(argo-cd): read the documented commitServer.extraEnvFrom value fix(argocd-image-updater): mount the webhook TLS and argocd-tls-certs-cm where v1.4 reads them fix(argocd-image-updater): render service.externalIPs as a list
argoproj/argo-rollouts	fix(trafficrouting): skip ingress paths without a service backend in nginx
argoproj/argo-workflows	fix(controller): apply retry backoff when retryStrategy has no limit
carvel-dev/vendir	Explain when a github release has no assets to fetch
containerd/nerdctl	fix(compose): honor deploy.restart_policy condition on-failure
containers/kubernetes-mcp-server	fix(core): accept valid field selectors rejected by the schema pattern
coredns/helm	docs: document missing values and drop the stale dnsConfig row fix: keep trafficDistribution inside the deployment.enabled guard
dapr/components-contrib	fix(state/redis): return empty results instead of an error when a query matches nothing
envoyproxy/gateway	fix(status): merge policy ancestor status across controllers docs: move Gateway Exported Metrics from Tasks to Concepts
etcd-io/auger	Skip tombstone revisions when listing key summaries
falcosecurity/charts	fix(falco-talon): read the elasticsearch, loki url and aws access key values fix(falcosidekick): use notlsport for the http-notls container port
falcosecurity/falcoctl	fix(follower): release wait group when canceled during startup jitter
fluent/fluent-operator	fix(fluentbit): render timeKeep of the LTSV parser as Time_Keep fix(fluentd): render name, standby and weight of a forward server fix(helm): honor buffer.enable in the Fluentd outputs fix(helm): use the buffer scope in the Fluentd OpenSearch output fix(helm): honor logstashFormat: false in the Fluentd ES and OpenSearch outputs
fluent/fluentd-kubernetes-daemonset	Fix azureblob, s3 and cloudwatch settings that are empty when unset Fix opensearch https failing with ENOENT when client cert env vars are unset
goharbor/harbor-cli	fix(retention): create a policy when the project has none
goharbor/harbor-helm	feat(database): add connMaxLifetime and connMaxIdleTime fix(pdb): render only maxUnavailable when it is set feat(core): add core.existingSecretKey for the core secret
goharbor/terraform-provider-harbor	fix(project_member_user): return update errors and read member_id fix: remove harbor_user from state when the user no longer exists fix(#650): retention policy replaced on every plan when scope is a plain project ID
helm/chart-testing	fix(exec): stop RunProcess from hanging on large stderr output
helm/helm-mapkubeapis	Bump to helm/v4 (picks up #235)
kagent-dev/tools	fix(logger): honor LOG_LEVEL
kedacore/charts	docs(keda): document serviceMonitor.namespace for each component docs(http-add-on): document priorityClassName and interceptor.watchNamespace
kedacore/http-add-on	fix(interceptor): fall back to shorter path when route headers do not match
knative/eventing	fix(eventpolicy): drop deleted EventPolicies from the tracker fix(channel): drop deleted Channels from the tracker fix(sequence): drop deleted Sequences from the tracker fix(parallel): drop deleted Parallels from the tracker fix(pingsource): drop deleted PingSources from the tracker fix(apiserversource): drop deleted ApiServerSources from the tracker
konveyor/tackle2-hub	🐛 Validate shared api.Document fields against their schema
Kuadrant/mcp-gateway	fix(controller): keep HTTPRoute status.parents under the Gateway API limit
kube-logging/fluent-plugin-label-router	Add worker_id label to router metrics with multiple workers
kubernetes-sigs/agent-sandbox	fix(sandboxd): reject stdin EOF for a PTY process fix(go-sdk): report ErrSandboxDeleted only when the claim is gone fix(sandboxd): return 404 for a path under a regular file
kubernetes-sigs/aws-ebs-csi-driver	Honor leaderElection values for csi-resizer and allow lease tuning in the chart schema
kubernetes-sigs/aws-load-balancer-controller	feat: add opt-in --leader-election-lease-duration flag feat(helm): make failurePolicy configurable for TargetGroupBinding, IngressClassParams and pod server id webhooks fix(helm): quote default-tags and aws-vpc-tags args
kubernetes-sigs/cluster-api-provider-aws	🐛 fix(eks): resolve sourceSecurityGroupRoles in additional control plane ingress rules 🐛 fix(eks): handle nil taint key and value in TaintsFromSDK
kubernetes-sigs/cluster-inventory-api	access: only set rest.Config.Proxy when the profile has a proxy URL
kubernetes-sigs/controller-tools	🐛 markers: parse bool-prefixed bare strings as strings
kubernetes-sigs/descheduler	fix(helm): allow setting serviceMonitor.honorLabels to false
kubernetes-sigs/dra-example-driver	Reject GPU sharing configs that set the other strategy's config Remove the temp checkpoint file when writing the checkpoint fails
kubernetes-sigs/e2e-framework	conditions: wait for observed generation in DaemonSetReady utils: use go env to find the go install directory watcher: stop the event loop when the watch ends
kubernetes-sigs/external-dns	fix(dnsimple): match zones on a label boundary fix(source): add each hostname once per generated PTR record fix(registry/txt): skip create when ownership TXT name overflows fix(cloudflare): ignore spaces and empty entries in custom hostnames
kubernetes-sigs/gateway-api-inference-extension	fix(conformance): list expected conditions in pool condition timeout fix(conformance): restore EPP Service selector when drain wait fails
kubernetes-sigs/jobset	Update LastTransitionTime when an exclusive condition is set to False Keep elastic scaling within the int32 pod count limits Skip nodeSelector strategy pods in the exclusive placement pod reconciler Validate spec.coordinator when it changes on update Reject invalid onJobFailureMessagePatterns in the webhook
kubernetes-sigs/kubebuilder	🐛 (API): return the error from closing a file written by the scaffold 🐛 (API): bind the fallback flags of external plugins so the user args can be parsed 🐛 (helm/v2-alpha): keep the manager replicas from the kustomize manifest 🐛 (go/v4): use k8s.io/api/rbac as the import path for the rbac.authorization core group 🐛 (API): make the title template function in DefaultFuncMap usable
kubernetes-sigs/kustomize	Make sure ResetOpenAPI() is called in tests, even if the tests failed
kubernetes-sigs/kwok	heap: update the key when pushing an existing item
kubernetes-sigs/node-feature-discovery	fix(kernel): parse version components when the suffix starts with '+' fix(nodefeaturerule): evaluate each term with its own match result
kubevirt/containerized-data-importer	importer: derive the S3 region from dual-stack and FIPS endpoints
kyverno/policies	fix(best-practices-vpol): check only regular containers in require-ro-rootfs fix(psp-migration-mpol): mutate Pods only in add-apparmor, add-capabilities and add-runtimeClassName
linkerd/website	docs: configure proxy workers alongside Helm CPU resources docs: use current control plane admin port names
open-feature/java-sdk-contrib	fix(ofrep): use the error code and details of a 400 response fix(ofrep): coerce numbers between integer and double when lossless feat(ofrep): configure the provider from OFREP environment variables
open-policy-agent/java-opa-sdk	fix(cli): print counters and histograms in the metrics table
openebs/dynamic-localpv-provisioner	fix(helm): render localpv.securityContext on the provisioner container
openebs/lvm-localpv	docs(chart): sync the README values table with values.yaml fix(lvmnode): report volume groups that hold an inactive thin pool fix(snapshot): keep the snapshot when lvs fails during deletion fix(block): do not panic when the block target file cannot be created fix(chart): render lvmNode and lvmController labels
openebs/zfs-localpv	feat(helm): allow disabling the csi-snapshotter fix(deploy): set capacity-ownerref-level for csi-provisioner fix(mount): do not bind mount a block volume twice at the same target fix(controller): keep node expansion on a retried ControllerExpandVolume
openkruise/charts	fix(kruise): point CRD conversion webhooks at the chart webhook service
prometheus-community/helm-charts	[prometheus-postgres-exporter] Fix NOTES pod selector and namespace [prometheus-redis-exporter] Fix NOTES pod selector and ports [prometheus-yet-another-cloudwatch-exporter] Add dnsPolicy and dnsConfig [prometheus-sql-exporter] Fix indentation of serviceAccount annotations and networkPolicy labels [prometheus-adapter] Fix service annotations indentation [prometheus-systemd-exporter] Render env values in the DaemonSet [alertmanager-snmp-notifier] Honor namespaceOverride on all resources
prometheus-community/postgres_exporter	fix(stat_progress_vacuum): read dead tuple params by server version
prometheus/mysqld_exporter	collector/binlog: return scan and iteration errors
prometheus/node_exporter	fix(diskstats): drop sector metrics on darwin
submariner-io/submariner-charts	Omit ceIPSecPSK when no IPsec PSK is set
velero-io/velero-plugin-for-gcp	Retry regional disk snapshots without labels when setLabels is missing

Other projects · 249 open in 156 repos

Project	Pull requests
adriannovegil/awesome-observability	Add Pyrra to Alerts Add OpenObserve to APM
aminueza/terraform-provider-minio	fix(iam_group_policy): report read errors instead of dropping from state fix(ilm): report read errors instead of dropping the policy from state fix(object): compare RFC3339 timestamps as instants
ansible-collections/ansible.posix	at: do not schedule jobs from the module temporary directory
ansible-collections/community.aws	feat(elb_target_group): add ip_address_type option elasticache - do not report changes for wildcard engine versions
ansible-collections/community.grafana	fix(grafana_contact_point): ignore provenance when checking for changes
ansible-collections/community.proxmox	fix(proxmox_user): compare groups regardless of order fix(proxmox_backup_schedule): handle jobs without a vmid list fix: treat tasks that end with warnings as successful fix(proxmox_snap): report changed in check mode fix(proxmox_kvm): wait for the template conversion task fix(proxmox): keep the MAC address when updating netif
ansible-collections/community.zabbix	zabbix_host: compare inventory_zabbix values as strings
ansible-collections/kubernetes.core	fix(k8s): match set-based label selectors on prefixed keys
aquasecurity/trivy	fix(helm): point the ingress at the service named by service.name
argoproj-labs/terraform-provider-argocd	feat(account_token): add optional token_id attribute
astronomer/terraform-provider-astro	Keep secret variable link overrides from the plan on read
AsyncFuncAI/deepwiki-open	fix(docker): actually install certificates from CUSTOM_CERT_DIR fix: use the shared WebSocket URL helper in slides and workshop pages
aws-ia/terraform-aws-eks-blueprints-addons	fix: Keep nested prefixes in the Velero backup location
aws/aws-cli	Write JSON file cache entries atomically
aws/karpenter-provider-aws	fix: render settings.vmMemoryOverheadPercent when it is 0
awslabs/eks-node-viewer	ci: pin actions by SHA and scope release token to the job fix: update node usage when a bound pod's requests change
awslabs/mcp	fix(ecs-mcp-server): send valid CloudWatch Logs requests in fetch_task_logs
aziontech/lib	fix(utils): keep '=' in cookie values in parseRequest fix(utils): treat paths with a dot in a parent segment as routes fix(cookies): emit Max-Age=0 when maxAge is 0 fix(cookies): keep '=' in cookie values when parsing
bank-of-england/forecast_evaluation	Accept a single extra_ids string and name missing columns in validation errors
bitnami/charts	[bitnami/redis] Render commonAnnotations on the sentinel external access services [bitnami/mongodb] Render commonAnnotations on the NetworkPolicy
bitnami/sealed-secrets	fix(controller): retry when the SealedSecret status update fails fix(controller): retry unsynced SealedSecrets when a new key is registered fix(kubeseal): fail on malformed documents instead of skipping them fix(helm): use the container ports in the NetworkPolicy ingress rule
bloomberg/causal-ts	Follow lag-0 mirror marks in extract_subgraph Do not count <-> as an edge in graph comparison plots, reject non-DAG ground truth Read bytes edge marks in tigramite_graph_to_binary
bloomberg/memray	Fix stats histogram for degenerate sizes and bin edges
bpg/terraform-provider-proxmox	feat(firewall): support importing firewall aliases
buildkite/terraform-provider-buildkite	fix(portal): clear description and allowed_ip_addresses when removed
bytebase/terraform-provider-bytebase	fix: handle environments removed outside Terraform fix: drop archived or purged projects from state on read
civo/civo-cloud-controller-manager	fix: use the node InternalIP for load balancer backends and skip nodes without an address
civo/terraform-provider-civo	fix(dns): return import errors instead of panicking fix(instances): drop reserved IP assignment from state when it drifts
ClickHouse/clickhouse-go	Only request SSL certificate auth over HTTP when a client cert is set
cloudflare/cfssl	signer: trim spaces and skip empty entries in SplitHosts
Comfy-Org/ComfyUI	Honor --disable-metadata in Save WEBM and Save SVG Don't require images in WanPhantomSubjectToVideo
controlplaneio-fluxcd/flux-operator	mcp: keep cluster-scoped kinds out of the target namespace in diff
crossplane-contrib/function-auto-ready	fix(healthchecks): detect failing HPAs regardless of condition order
crossplane-contrib/provider-helm	fix(release): report a release available right after upgrading it
DataDog/integrations-extras	Add Xinference integration Add LocalAI integration Add vLLM Production Stack integration Add Volcano integration Add Hugging Face TEI integration Add llama.cpp integration
dbt-labs/terraform-provider-dbtcloud	fix: remove databricks and spark credentials from state on 404
deliveryhero/helm-charts	[stable/prometheus-spot-termination-exporter]: render env and readiness probe httpHeaders [stable/mlflow]: render imagePullSecrets on the Deployment [stable/pg-repack-scheduler]: make the service account settable and fix pod spec rendering [stable/no-chart] ci: pin actions by SHA and set read-only token permissions [stable/prometheus-cloudflare-exporter]: render podLabels on the pod template
digitalocean/terraform-provider-digitalocean	spaces: stop hiding bucket policy read errors spaces: remove bucket CORS configuration from state when it is gone
elastic/integrations	[New Integration] Add Qdrant integration [New Integration] Add vLLM integration
elastic/terraform-provider-ec	Honor size_resource when counting nodes for dedicated masters
equinix/cli	fix: read the config file passed with --config
equinix/terraform-equinix-fabric	fix: cloud router module provider pin and ignored routing protocol inputs fix: streaming module outputs, Terraform version and Splunk example inputs
equinix/terraform-provider-equinix	fix: remove equinix_fabric_connection from state when it no longer exists fix: mark Fabric credential attributes as sensitive fix: stop mutating the shared Network Edge client user agent
exoscale/terraform-provider-exoscale	fix(block_storage_volume_snapshot): remove from state when deleted outside of Terraform
fishaudio/fish-speech	fix: reject an unknown reference_id instead of creating its directory
flant/shell-operator	[shell-operator] feat: add a generic Helm chart
fluent-plugins-nursery/fluent-plugin-cloudwatch-logs	Fix log_group_aws_tags placeholders resolved only for the first chunk
fluent-plugins-nursery/fluent-plugin-concat	Fix timeout flush stopping when a partial_ordinal cannot be converted
fluent-plugins-nursery/fluent-plugin-kubernetes_metadata_filter	Point the container to the pod once a later lookup finds it
Flux159/mcp-server-kubernetes	fix: pass the kubeconfig context to the helm tools
gestaogovbr/Ro-dou	chore: atualiza a imagem do git-rsync para Alpine 3.24 fix: define securityContext dos pods do Airflow no Helm fix: grava os dados do PostgreSQL em subdiretório do volume no Helm
github-aws-runners/terraform-aws-github-runner	fix(termination-watcher): keep retry queue visibility timeout at or above the Lambda timeout
globocom/go-m3u8	ci: set up Go once from go.mod
goreleaser/goreleaser	fix(aur): install every binary of the archive in the default package
gruntwork-io/terragrunt	fix: include init in get_terraform_commands_that_need_vars for OpenTofu >= 1.8
headlamp-k8s/plugins	ai-assistant: security: Redact last-applied annotation on Secrets flux: HelmRelease: Show the chart name in the Chart field
hetznercloud/hcloud-go	fix(exp): escape backslashes in TXT records and keep escapes in one chunk
hetznercloud/terraform-provider-hcloud	fix(server): do not delete primary ip already assigned to the server
huaweicloud/terraform-provider-huaweicloud	docs(CCE): explain how to use the add-on template spec with huaweicloud_cce_addon fix(OBS): remove bucket sub-resources from the state when the bucket is gone fix(OBS): leave connection retries to the OBS SDK so retries are signed again
huggingface/huggingface_hub	[HTTP] Parse kernel repos from API URLs in errors
huggingface/text-embeddings-inference	Document the real default of truncate in the OpenAPI schema Redact --api-key in the startup log
ionos-cloud/cluster-api-provider-ionoscloud	🐛 Make FindLatestMachine independent of list order
ionos-cloud/terraform-provider-ionoscloud	fix: remove nsg, nfs and wireguard resources from state on 404
jenkinsci/explain-error-plugin	fix: ignore a trailing slash in auto-fix SCM URLs fix: keep the CRLF line endings of a file auto-fix modifies fix: insert after the line a zero-length auto-fix hunk names
jenkinsci/kubernetes-plugin	Stop the exec keepalive when ContainerExecProc is closed
jenkinsci/mcp-server-plugin	Count open SSE and Streamable HTTP clients in /mcp-health activeConnections
jenkinsci/pipeline-utility-steps-plugin	Return only -1, 0 or 1 from compareVersions
jianyuan/terraform-provider-sentry	fix: remove resources deleted outside of Terraform from state on read
kreuzwerker/terraform-provider-docker	fix(container): read cpus back without replacing the container
kubeai-project/kubeai	fix: reject resource profile multiples below 1
kubecolor/kubecolor	feat: colorize kubectl cordon output fix: pick the right printer for kubectl api-resources -o name/json/yaml fix: color "Last State" of init containers in kubectl describe
kubermatic/machine-controller	KubeVirt: honor the instancetype kind set in the provider spec
latitudesh/agent	fix(firewall): parse IPv6-only UFW rules so removed ones get deleted fix(client): time out API requests so a stalled call can't freeze the sync loop
latitudesh/cli	fix(cli): walk every page in firewalls, firewall assignments and elastic-ips list fix(cli): send SDK requests to the host set by --hostname/--scheme/--base-path
latitudesh/examples	fix(nomad-consul): add the private network resources the example references
latitudesh/terraform-provider-latitudesh	fix(project): read the project by ID instead of scanning the first page fix: remove server, ssh_key, user_data and firewall from state when deleted outside Terraform
linode/linode-cloud-controller-manager	[fix] return an error when the backend subnet name has no VPC [fix] release the IPv4 node CIDR when IPv6 allocation fails [fix] match firewall devices by entity type as well as ID [fix] keep IPv6 route bookkeeping consistent in the route controller
linode/terraform-provider-linode	Fix unordered comparison in CompareSlices Remove image share group resources from state on 404
losisin/helm-values-schema-json	fix: resolve YAML aliases and merge keys in values
luthermonson/go-proxmox	fix(nodes): wire client, node and storage into VzTmpls results fix(snapshot): send the description so UpdateConfig can clear it fix(storage): fill the backup volid from the requested name fix(client): keep integer query params out of exponent notation fix(tasks): stream Watch log lines in order and up to the task end
MagaluCloud/mgc-sdk-go	fix(client): let errors.Is/As see the error wrapped by RetryError fix(http): always send the request when MaxAttempts is zero or negative
MagaluCloud/terraform-provider-mgc	fix(blockstorage): remove volume from state when it no longer exists fix(vm): remove instance from state when it no longer exists
memcached/memcached	contrib: add a Helm chart
Mongey/terraform-provider-kafka	Support importing kafka_quota
moov-io/fed	download: use ClientOpts values in NewClient
moov-io/go-sftp	fix: only skip the directory that returned SkipDir in Walk
moov-io/imagecashletter	cashLetter: keep caller-set BOFDItemSequenceNumber on returns
moov-io/watchman	download: apply Options passed to New
mp-ac/verifica-ai	fix: evita que o uv run instale o grupo dev ao iniciar os contêineres
newrelic/newrelic-quickstarts	feat: add vLLM quickstart
NVIDIA/k8s-device-plugin	Inspect embedded config.map entries before adding SYS_ADMIN
OHF-Voice/piper1-gpl	Put the --sentence-silence pause between lines of input too Write a valid, empty WAV file when the text has nothing to speak
OHF-Voice/wyoming	Return None from async_read_event when the stream closes mid-event Average channels when converting stereo to mono
OHF-Voice/wyoming-piper	Answer a plain synthesize sent after a text stream
oliver006/redis_exporter	feat: accept /scrape query parameters with underscores fix: keep check-keys pipeline replies aligned when TYPE fails fix: don't report unknown stream group lag and entries-read as 0
open-webui/helm-charts	fix(terminals): match operator labels in default terminalPodSelector
OpenBanking-Brasil/fin_search	fix: restaura o Maven Wrapper e corrige instruções de execução
openbq-org/OpenBB	[BugFix] `openbb-core`: Build combined certificate path from the file name
openlit/openlit	fix(go-sdk): read chat and embedding prices from assets/pricing.json
openobserve/o2-k8s-operator	fix: use group-qualified CRD names in deploy.sh --uninstall
openobserve/openobserve-helm-chart	feat(openobserve-collector): add extraEnv for the agent, gateway and eBPF collectors fix(openobserve): pass connection pool sizes and ZO_TRACING_EXTRA_ENVS to the ConfigMap fix(openobserve): honor auth.ZO_REPORT_USER_EMAIL and auth.ZO_REPORT_USER_PASSWORD fix(openobserve): apply nodeSelector, affinity, resources and replicaCount to Dex fix(openobserve,openobserve-standalone): pass group, kind and port to HTTPRoute parentRefs fix(openobserve): honor postgres.spec.enableSuperuserAccess
opentelekomcloud/terraform-provider-opentelekomcloud	[Fix] Private NAT, ER: remove deleted resources from state on read
otwld/ollama-helm	fix: keep service ipFamilies inside the non-Knative Service fix: allow revisionHistoryLimit to be set to 0
pab1it0/prometheus-mcp-server	fix: keep the Prometheus error message on 4xx responses
pengovbr/mod-wssei	ci: publica o swagger no GitHub Pages a cada push na master docs: torna o texto opcional no swagger de marcar processo
PrefectHQ/terraform-provider-prefect	fix(block_schema): handle read errors instead of panicking
proxmoxer/proxmoxer	Fix Tasks.decode_log for log pages that do not start at line 1
qdrant/qdrant-helm	Fix readiness probe path for non-semver image tags
rancher/wrangler	Do not panic on conditions without LastUpdateTime
ray-project/ray	[Java] Bump log4j to 2.25.5 and jackson-databind to 2.18.11
remsky/Kokoro-FastAPI	fix(audio): keep chunk audio when GAP_TRIM_MS is 0
render-oss/terraform-provider-render	fix(registrycredential): remove credential from state when Read gets 404
safetensors/safetensors	fix(numpy): byteswap tensors loaded from bytes on big-endian hosts
scaleway/terraform-provider-scaleway	fix: #4587 accept offer-specific private network options on baremetal servers
sergelogvinov/helm-charts	fix(mongodb-backup): apply podLabels to job pods
sergelogvinov/karpenter-provider-proxmox	fix: stop slaac from writing into net.IPv6zero
sergelogvinov/proxmox-cloud-controller-manager	docs: nest network options under features.network fix: reject unknown provider types in the cloud config fix: compare vm and node names case-insensitively fix: honor exclusions in external_ip_cidrs fix: skip ipv4 link-local addresses from the qemu agent
sergelogvinov/proxmox-csi-plugin	docs: explain why volume snapshots need the root@pam password
splunk/observability-content-contrib	terraform-jumpstart: add vLLM module
stackrox/kube-linter	fix(pdb-min-available): match deployments with matchExpressions selectors
stakater/application	fix(deployment): render minReadySeconds on the Deployment spec
stakater/Forecastle	fix(chart): honor namespace value in NetworkPolicies and PDB
stakater/Reloader	fix(chart): point monitor namespaceSelector at the namespace value fix: honor exclude annotations set on the pod template fix(handler): treat non-2xx --webhook-url responses as failures
stern/stern	fix: match the name in pod/ literally fix: guard the label map in List against concurrent writes fix: keep the UTC offset when removing the subsecond of a log timestamp
strowk/mcp-k8s-go	fix: mask secrets regardless of how kind and version are spelled
supabase/terraform-provider-supabase	fix(project): report error when project fails to become active on create fix(project): remove project from state when Read gets 404
syself/cluster-api-provider-hetzner	🐛 Return the actual error when deleting placement groups fails
tailscale/terraform-provider-tailscale	tailscale: handle webhooks and posture integrations deleted outside Terraform
takenet/deckard	fix(helm): honor housekeeper.image repository and tag
Telmate/terraform-provider-proxmox	fix: keep proxmox_pool in state when reading it fails
tensorchord/Awesome-LLMOps	Add AI observability pack to Observability
terraform-aws-modules/terraform-aws-ecs	fix: Pass `cluster_capacity_providers_wait_duration` through the root module
terraform-aws-modules/terraform-aws-eks	fix: Remove unused cluster_primary_security_group_id from eks_managed_node_groups type
terraform-aws-modules/terraform-aws-iam	fix: Keep IRSA policy count known when policy documents are not read fix: Add `ec2:DescribeVpcPeeringConnections` to the LBC TargetGroupBinding only policy
terraform-linters/tflint-ruleset-aws	Check aws_iam_policy_document data sources in gov_friendly_arns
terrakube-io/terrakube-helm-chart	fix(otel): quote defaulted values in the otel ConfigMaps fix(api): render automountServiceAccountToken when it is false
tiiuae/sbomnix	repology: treat infinity endpoints as open-ended in is_affected
topfreegames/pitaya	fix(xk6-pitaya): build the k6 image with a supported Go and k6 v1
tsuru/acl-operator	fix: stop requeueing deleted tsuru apps and cronjobs
tsuru/charts	fix(tsuru-prometheus-pool): select pods by the release's Prometheus name
tsuru/deploy-agent	fix: return an error instead of panicking on a truncated build context archive
tsuru/go-tsuruclient	fix(config): keep token files readable only by the owner
tsuru/kubernetes-router	ci: pin third-party actions to commit SHAs and restrict token permissions fix(ingress): remove certificate without panicking when ingress has multiple TLS entries
tsuru/nginx-operator	fix: don't panic updating an ingress when nginx sets no ingress annotations
tsuru/rpaas-operator	fix: return the get error before using the rpaas instance in reconcile
tsuru/terraform-provider-tsuru	fix: reject malformed import IDs for tsuru_cluster_pool and tsuru_pool_constraint fix: report non-API errors from retried tsuru calls feat: add tsuru_pool data source fix: drop tsuru_app_cname and tsuru_app_router from state when removed outside terraform
tsuru/tsuru	fix(api): return 400 when creating a team token with an invalid token_id ci: lock workflow dependencies with actions.lock and restrict token permissions fix(api): return 409 when creating a team token with an existing token_id
tsuru/tsuru-client	fix(metadata): accept the -t type in any case chore(docker): bump runtime image to alpine 3.24.3 fix: print an empty JSON array for empty lists with --json
vmware-tanzu/helm-charts	[velero] Render skipImmediately: false on schedules
vultr/terraform-provider-vultr	Fix import of NAT gateway firewall and port forwarding rules Mark credential attributes as sensitive Remove database sub-resources from state when the database is gone
vultr/vultr-cloud-controller-manager	Trim whitespace in https-ports and firewall-rules annotations
wal-g/wal-g	fix(mysql): don't pass --apply-log-only to mariadb-backup
wpjunior/argo-cd	Sync with master and fix OCI ref digest reuse in GetAppDetails
xorbitsai/inference	fix(client): accept image paths and URLs in image_to_image, inpainting and ocr
zammad/zammad-helm	fix: render podDisruptionBudget minAvailable/maxUnavailable when set to 0 fix: set REDIS_USERNAME in sentinel mode when zammadConfig.redis.username is set
zilliztech/milvus-helm	[tei] fix: render labels, annotations, volumes and topologySpreadConstraints

Projects

helm-charts: production-ready Helm charts with secure defaults, Gateway API, HPA/KEDA and schema-validated values, tested and released from CI
terraform-aws-platform: opinionated Terraform modules for EKS platforms (VPC, EKS with access entries and Pod Identity, Karpenter), tested with mock providers and laid out for Terragrunt

Certifications

Platform

Delivery

Observability

Cloud & code

Navigation Menu

Lucas Barros lbarrosby

Achievements

Achievements

Block or report lbarrosby

Lucas Barros

Popular repositories Loading

Uh oh!