babs.github.io

babs.github.iohttps://babs-github-io-preview.k.plou01.jazk.in/Recent content on babs.github.ioHugoen-usContributionshttps://babs-github-io-preview.k.plou01.jazk.in/contributions/Mon, 01 Jan 0001 00:00:00 +0000https://babs-github-io-preview.k.plou01.jazk.in/contributions/<p>Open source contributions to projects I don’t maintain — bug fixes, features, translations, and docs.</p> <h2 id="root-ggplik">root-gg/plik</h2> <p>Added generic OIDC authentication with security hardening.</p> <ul> <li><a href="https://github.com/root-gg/plik/pull/590">Extract id_token claims, enforce email_verified, harden sub validation</a> — 2026</li> <li><a href="https://github.com/root-gg/plik/pull/548">Add generic OIDC authentication provider</a> — 2026</li> </ul> <h2 id="osscontainertoolskaniko">osscontainertools/kaniko</h2> <p>CI rework on the community-maintained Kaniko fork.</p> <ul> <li><a href="https://github.com/osscontainertools/kaniko/pull/419">Rework CI for clarity</a> — 2025</li> <li><a href="https://github.com/osscontainertools/kaniko/pull/368">Use GHCR as primary registry, separate dev builds from release</a> — 2025</li> </ul> <h2 id="rustfsrustfs">rustfs/rustfs</h2> <ul> <li><a href="https://github.com/rustfs/rustfs/pull/992">Add existingSecret handling and support for extra manifests (Helm)</a> — 2025</li> </ul> <h2 id="nabsulk8s-ecr-login-renew">nabsul/k8s-ecr-login-renew</h2> <ul> <li><a href="https://github.com/nabsul/k8s-ecr-login-renew/pull/81">Add post-install/upgrade Job + refactor CronJob templates</a> — 2025</li> </ul> <h2 id="chainguard-forkskaniko">chainguard-forks/kaniko</h2> <ul> <li><a href="https://github.com/chainguard-forks/kaniko/pull/33">Fix ENV syntax in Dockerfile</a> — 2025</li> </ul> <h2 id="hacf-frfreebox-api">hacf-fr/freebox-api</h2> <ul> <li><a href="https://github.com/hacf-fr/freebox-api/pull/808">Add get_backup_lte_status</a> — 2025</li> </ul> <h2 id="external-secretsexternal-secrets">external-secrets/external-secrets</h2> <ul> <li><a href="https://github.com/external-secrets/external-secrets/pull/4379">Fix GitLab group variable regression</a> — 2025</li> </ul> <h2 id="kyvernokyverno--kyvernopolicies">kyverno/kyverno & kyverno/policies</h2> <ul> <li><a href="https://github.com/kyverno/policies/pull/1212">Add OpenTelemetry inject-otel-environment-variable policy</a> — 2024</li> <li><a href="https://github.com/kyverno/kyverno/pull/11815">Fix global context error message logic</a> — 2024</li> <li><a href="https://github.com/kyverno/kyverno/pull/11788">Remove policy exception dependency from globalcontext</a> — 2024</li> </ul> <h2 id="rdvencioneckaws-vpn-client-docker">rdvencioneck/aws-vpn-client-docker</h2> <ul> <li><a href="https://github.com/rdvencioneck/aws-vpn-client-docker/pull/6">Update Dockerfile with OpenVPN 2.6.12 support</a> — 2024</li> </ul> <h2 id="mdaverdejsonpath">mdaverde/jsonpath</h2> <ul> <li><a href="https://github.com/mdaverde/jsonpath/pull/6">Add SetKeepNilAsNull to set null values</a> — 2024</li> </ul> <h2 id="helm-unittesthelm-unittest">helm-unittest/helm-unittest</h2> <ul> <li><a href="https://github.com/helm-unittest/helm-unittest/pull/476">Attempt to fix #471</a> — 2024</li> </ul> <h2 id="googlecontainertoolskaniko">GoogleContainerTools/kaniko</h2> <ul> <li><a href="https://github.com/GoogleContainerTools/kaniko/pull/2935">Add flag to remap registries for any registry mirror</a> — 2024</li> </ul> <h2 id="project-zotzot--zui">project-zot/zot & zui</h2> <ul> <li><a href="https://github.com/project-zot/zot/pull/1691">Add generic OIDC with customizable name</a> — 2023</li> <li><a href="https://github.com/project-zot/zui/pull/375">Add customizable generic OIDC login button</a> — 2023</li> <li><a href="https://github.com/project-zot/zot/pull/1693">Fix apikey case in docs</a> — 2023</li> </ul> <h2 id="kopiakopia">kopia/kopia</h2> <ul> <li><a href="https://github.com/kopia/kopia/pull/2845">Add Custom Root CA option for S3</a> — 2023</li> </ul> <h2 id="keel-hqkeel">keel-hq/keel</h2> <ul> <li><a href="https://github.com/keel-hq/keel/pull/709">Allow change of pollDefaultSchedule via env var</a> — 2023</li> </ul> <h2 id="oauth2-proxyoauth2-proxy">oauth2-proxy/oauth2-proxy</h2> <p>Session management, Keycloak provider, and unix socket upstream support.</p>Projectshttps://babs-github-io-preview.k.plou01.jazk.in/projects/Mon, 01 Jan 0001 00:00:00 +0000https://babs-github-io-preview.k.plou01.jazk.in/projects/<h2 id="featured">Featured</h2> <p>A curated subset — the most technically interesting work, where the challenge was non-trivial.</p> <ul> <li><strong><a href="#mcp-auth-proxy">mcp-auth-proxy</a></strong> — OAuth 2.1 authorization server fronting any OIDC IdP for MCP clients. STRIDE-modeled, replay-protected, rate-limited discovery surface, per-tool metrics with cardinality cap.</li> <li><strong><a href="#inkwest">inkwest</a></strong> — AI-powered Kubernetes debugging assistant. Read-only kubectl proxy with multi-cluster, OIDC, budget management, multi-provider LLM backends.</li> <li><strong><a href="#cosanet">cosanet</a></strong> — Prometheus exporter that walks every container sandbox on a node to expose conntrack, <code>/proc/net/snmp</code>, and netstat metrics — no per-pod instrumentation.</li> <li><strong><a href="#ebpf4fun-ring">ebpf4fun-ring</a></strong> — eBPF playground capturing DNS via BPF ring buffers, with dynamic interface attach and pod resolution.</li> <li><strong><a href="#claude-quota">claude-quota</a></strong> — Cross-platform systray (Linux/Windows/macOS) reading Claude OAuth credentials, polling usage API, and rendering live burn-rate projection.</li> <li><strong><a href="#multiping">multiping</a></strong> — ICMP/TCP multi-target probing CLI with state-transition logging. ~26 stars on GitHub.</li> <li><strong><a href="#anag">aNag</a></strong> — Unofficial Nagios/Icinga/Thruk Android client. 100K+ installs, 4.7★ on Google Play.</li> </ul> <h2 id="ai--llm-tooling">AI & LLM Tooling</h2> <h3 id="inkwest">Inkwest</h3> <p><a href="https://github.com/inkwest/inkwest">https://github.com/inkwest/inkwest</a></p>