Results for “clu”

Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters, covering Day-0 decisions, SKU selection, networking, security, and operations.

Manages and analyzes Azure Kubernetes Service clusters via Azure CLI, covering node pools, addons, upgrades, and health diagnostics.

Set up and manage Google Kubernetes Engine clusters, node pools, workloads, networking, and storage with Autopilot defaults.

Optimize Kubernetes cluster costs by right-sizing resources, configuring autoscalers, using spot instances, and monitoring spend.

Manage Uncloud clusters with the `uc` CLI: bootstrap machines, deploy Compose services, publish ports, configure Caddy ingress, scale, inspect logs, and manage volumes.

Runs kubectl and helm commands with kubeconfig injection, emphasizing parallel execution, JSON output with jq filtering, and batch operations for efficient cluster management.

Walks users from a bare AKS cluster to a running AI model deployment, covering cluster verification, controller install, GPU assessment, provider setup, and first deployment.

Submit and manage TAO training, evaluation, and inference jobs on SLURM GPU clusters over SSH with sbatch/srun, Pyxis/Enroot containers, and Lustre-backed storage.

Plans, executes, and validates Google Kubernetes Engine (GKE) cluster upgrades and maintenance operations for both Standard and Autopilot clusters, producing upgrade plans, checklists, and runbooks with gcloud commands.

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

Manage an Uncloud cluster — deploy services, configure Caddy ingress, add static proxy routes for non-cluster devices, publish ports, scale, inspect logs, and manage machines and volumes with the `uc` CLI.

Find over-permissive RBAC roles and service-account token abuse paths in Kubernetes using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess during authorized cluster security reviews.

Provides links to ArgoCD documentation and videos for running database clusters and GitOps deployments.

Manage Amazon EKS clusters, node groups, IRSA, add-ons, and deployments using AWS CLI and eksctl.

Manage AWS EKS clusters, node groups, IRSA, add-ons, and workloads using AWS CLI and eksctl commands.

Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.

Analyzes AWS EKS clusters, nodegroups, addons, IRSA configuration, and control plane logging using parallel AWS CLI queries with anti-hallucination guardrails.

Submits TAO container jobs as single-pod Kubernetes Jobs with NVIDIA GPU scheduling on EKS, GKE, AKS, or on-prem clusters.

Evaluates a containerized framework for deploying distributed big data workloads, measuring execution time and cloud cost scaling from four to eight nodes.

Hardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.

Deploy and verify Multus-based pod multihoming on OKE clusters with existing GVA secondary VNIC node pools, including discovery, manifest generation, and connectivity validation.

Deploys and manages Google Cloud Platform backends for Flutter apps, covering GKE clusters, Cloud Run services, Cloud SQL databases, Cloud Storage buckets, and Firebase integration.

Launch, monitor, stop, and debug NeMo-RL recipes on a Kubernetes cluster using the nrl-k8s CLI, supporting ephemeral and long-lived RayCluster modes.

Implement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.

Diagnoses and operates Kubernetes clusters: pods, deployments, ingress, HPA, PVC, StorageClass, NetworkPolicy, Secrets, Helm, ArgoCD, cert-manager. Reads before changing; mutations require confirmation and diff review.

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring.

Deploy kernel-level runtime security monitoring on Linux hosts or Kubernetes clusters using eBPF and Cilium Tetragon for process execution tracking, network observability, file access auditing, and runtime enforcement.

Systematically evaluates Kubernetes cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets using tools like kube-hunter, Kubescape, and kube-bench.

Scaffolds an isolated cloud development box per agent using Crabbox and Daytona, with its own database, dev server, and in-box browser for parallel testing without port or state collisions.