Linux lover, cloud native builder and open source maintainer from Toulouse, France. I work on developer platforms, mostly making Kubernetes, GitOps and delivery a bit less painful for the teams using them. Currently Cloud Specialist at Airbus Aircraft and DevOps consultant at CCL Consulting.

• 💼 Full-stack developer turned platform engineer
• ☁️ Kubernetes across public and sovereign clouds, on-prem and the edge
• 🧰 Specialized in developer experience, GitOps, and multi-cloud automation
• 💡 Active open-source maintainer and community advocate
• 📜 Certified Kubernetes Administrator (CKA) and Kubernetes Security Specialist (CKS)
• 🤖 Exploring how agentic AI reshapes platform engineering
• 🏢 10 years across aerospace, retail, and consulting
• 🎓 MSc in Cybersecurity (University of Kent) and Engineering degree (EPITECH)
• 🌍 Toulouse, France, open to full remote

• aslafy-z/helm-git - Helm Plugin - Install Helm Charts straight from Git repositories
• stakater/application - Generic helm chart for all kind of applications
• aslafy-z/plein - Multi-country PWA that finds the cheapest fuel stations around you and along your route
• ccl-consulting/fleeting-plugin-scaleway - GitLab Runner auto-scaling plugin for Scaleway cloud provider
• swapagarwal/swag-for-dev - 😎 swag opportunities for developers
• aslafy-z/aur-packages - Collection of Arch Linux AUR packages
• kube-logging/logging-operator - Logging operator for Kubernetes, as core contributor

• Cloud-native and edge platforms for next-generation onboard aircraft systems at Airbus
• ROS2 Dashcam: a Jetson-powered computer vision system for edge video processing
• Homelab: a multi-zone Talos Linux Kubernetes cluster, fully GitOps-driven with Argo CD, Cilium, Rook-Ceph storage, Keycloak SSO, and self-hosted services
• Kubernetes compliance, self-service platform tooling, and GitOps workflows at CCL Consulting
• Maintaining open-source tools and Helm plugins for the Cloud Native ecosystem

and more...

• aslafy-z/hauth - Harness auth broker for cloud workspaces: browser-free logins for AI coding CLIs, a loopback kiosk UI, and a per-user credential store (1 day ago)
• stakater/application - Generic Helm chart for deploying stateless applications on Kubernetes (4 days ago)
• aslafy-z/aur-packages - AUR packages collection (5 days ago)
• DataHearth/streamline - Self-hosted media manager for movies and TV. Replaces Radarr, Sonarr and Seerr with a single Go binary — web UI, REST API, built-in requests, SSO. Music and books planned. (5 days ago)
• aslafy-z/plein - A full tank at the right price — PWA that finds the cheapest fuel stations around you and along your routes (France · Spain · Andorra · Portugal) (2 weeks ago)
• martabal/qbittorrent-exporter - A fast and lightweight prometheus exporter for qBittorrent (3 weeks ago)
• wuxxin/aur-packages - archlinux AUR packages i maintain (3 weeks ago)
• thomiceli/opengist - Self-hosted pastebin powered by Git, open-source alternative to Github Gist. (3 weeks ago)
• aslafy-z/cv - (3 weeks ago)
• aslafy-z/aslafy-z.github.io - (3 weeks ago)

• fix(deployment): switch oauth proxy default image to quay.io on stakater/application (4 days ago)
• feat(security): enforce restricted security context defaults for all workloads on stakater/application (4 days ago)
• fix(helpers): render zero weight and backendRef filters in HTTPRoute on stakater/application (4 days ago)
• codex-desktop-git: switch to official Linux deb, update to 26.814.41407 on aslafy-z/aur-packages (5 days ago)
• ci: enable gosec repo-wide and fix the findings it surfaces on DataHearth/streamline (6 days ago)
• feat(cli): add user administration to the auth command group on DataHearth/streamline (1 week ago)
• ci: scan dependencies for known vulnerabilities with govulncheck on DataHearth/streamline (1 week ago)
• fix(auth): keep the last admin during OIDC role sync on DataHearth/streamline (1 week ago)

View all pull requests →

• home-operations/kopiur - A Kopia-native Kubernetes backup operator written in Rust (4 days ago)
• openai/fence - A fence keeps things out, but also in. This project is still in early, and active development. (4 days ago)
• tsouza/cerberus - Drop-in Prometheus / Loki / Tempo HTTP gateway for ClickHouse. Translate PromQL, LogQL, and TraceQL into optimized CH SQL — keep Grafana, swap the backend. (4 days ago)
• inevolin/k8s-cpu-limits-analyzed - Kubernetes CPU limits make your apps (very) slow and costly. CPU throttling analyzed, with proof. (4 days ago)
• securo-finance/securo - Open-source personal finance manager. Self-hosted, privacy-first. (1 week ago)
• paperclipai/paperclip - The open-source app everyone uses to manage agents at work (1 week ago)
• kenn-io/msgvault - Archive a lifetime of email and chat. Offline search, analytics, and AI query over your full message history. Powered by SQLite and DuckDB (1 week ago)
• kylan11/understudy - Best-effort high availability for single-replica Kubernetes workloads: no downtime from announced node disruptions (drains, upgrades, consolidation, spot reclaims) without a standing second replica. (2 weeks ago)
• bashalarmistalt/decimen-optical-transfer - (2 weeks ago)
• nicobailon/surf-cli - The CLI for AI agents to control Chrome. Zero config, agent-agnostic, battle-tested. (2 weeks ago)

View all stars →