This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Production-grade Kubernetes cluster on Hetzner Cloud using Talos Linux — private nodes behind HA OPNsense NAT, Cilium CNI with WireGuard encryption, Longhorn distributed storage on Hetzner attached volumes, Traefik ingress with automatic Hetzner Load Balancer, and cert-manager.

Setup AKS Private Cluster with BYO DNS

Private AKS cluster, access over VM

GKE Private Cluster | Terraform IaC | CI/CD: GitHub Actions + WIF (zero SA keys) | Observability: Grafana 11 + Cloud Monitoring + GKE dashboard | DR: Velero + GCS — RTO 4s, RPO <24h | Spot e2-small

A fully private CI/CD platform built on Microsoft Azure, leveraging a private Kubernetes cluster, Azure Application Gateway for Containers, Infrastructure as Code, and automated deployment pipelines.

Enterprise-grade Azure Kubernetes Service (AKS) Private Cluster deployment using Azure Bicep, Azure DevOps CI/CD, Infrastructure as Code (IaC), and secure Azure networking.

Cloud (aws) based kubernetes cluster as well as supporting network/other infrastructure in easily deployable terraform modules. Uses kOps for cluster setup

Reference implementation for deploying Azure Kubernetes Service (AKS) using Terraform, and will include few best practices for building AKS cluster.

This repository demonstrates how to secure a private Google Kubernetes Engine (GKE) cluster by applying fine‑grained Kubernetes Network Policies. It follows the Principle of Least Privilege, showing how to restrict pod‑to‑pod communication, validate connectivity before and after policy application, and configure namespace‑scoped access rules.