DoD-Inspired Secure Kubernetes Platform Lab
Bootstrapped a two-node Kubernetes cluster from scratch on Rocky Linux 8 using kubeadm, containerd, and Flannel CNI on AWS EC2. Provisioned 13 AWS resources with Terraform. Implemented GitOps with ArgoCD. Hardened manifests with non-root UID, read-only filesystem, dropped capabilities, seccomp, and SHA256 image pinning.
Four-job GitHub Actions security pipeline: tfsec, Checkov, Trivy, Gitleaks. Checkov passing checks improved from 29 to 41+ through iterative remediation mirroring DoD POA&M processes.