Skip to content
View lbarrosby's full-sized avatar

Block or report lbarrosby

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
lbarrosby/README.md

Lucas Barros

Based in Rio de Janeiro. I design and operate Kubernetes platforms for teams that ship to production every day, mostly in financial services.

Over the last years that meant running a fleet of 330 clusters behind ArgoCD, Atlantis and Rancher, turning EKS provisioning from a two-day manual process into a 40-minute Terraform/Terragrunt pipeline, moving a 3,000 jobs/day Jenkins farm to immutable infrastructure, and treating cloud cost as an engineering metric rather than a finance report.

I care about boring, predictable infrastructure: everything in code, every change reviewed, upgrades that nobody notices.

Open source

Contributing upstream across the cloud native ecosystem: CNCF projects like Kubernetes, Envoy, Prometheus, Argo, Crossplane, Headlamp and CoreDNS, plus Terraform providers, Helm charts and AI infrastructure tooling (NVIDIA device plugin, Ray, deepwiki-open).

Upstream PRs Merged Projects Merged in repositories the CNCF lists for graduated projects Filter and search all PRs Thanked by maintainers

Merged · official CNCF project repositories first · see all 195 with filters

Official CNCF Graduated projects · 6 merged in 4 repos
Project Pull request Merged Merged by Kind words
Karmada: official repository of a CNCF graduated project
karmada-io/karmada
fix(resourceinterpreter): skip Ingress TLS entries without secretName in dependencies 2026-11-10 @karmada-bot 🙏 @zhzhuang-zju: "Thanks"
Fluentd: official repository of a CNCF graduated project
fluent/fluentd
in_tcp: fix inflated output emit_count when a message arrives in several reads 2026-11-10 @Watson1978 🙏 @Watson1978: "Thanks!"
CoreDNS: official repository of a CNCF graduated project
coredns/coredns
plugin/acl: only add the EDE OPT record when the request has EDNS 2026-11-07 @yongtang
Fluentd: official repository of a CNCF graduated project
fluent/fluentd
parser_syslog, in_syslog: fix handling of a priority on a later line 2026-11-06 @Watson1978 🙏 @Watson1978: "Thanks!"
Fluentd: official repository of a CNCF graduated project
fluent/fluentd
record_accessor: raise ConfigError for a non-integer array index 2026-11-06 @Watson1978 🙏 @Watson1978: "Thanks!"
Rook: official repository of a CNCF graduated project
rook/rook
osd: don't wipe metadata devices of existing OSDs 2026-11-05 @arttor 🙏 @arttor: "thanks for the fix."
Official CNCF Incubating projects · 4 merged in 3 repos
Project Pull request Merged Merged by Kind words
OpenCost: official repository of a CNCF incubating project
opencost/opencost
fix(inferencecost): keep only grouped properties when aggregating 2026-11-10 @ameijer 🙏 @ameijer: "thank you cc @simanadler"
Contour: official repository of a CNCF incubating project
projectcontour/contour
Set alt_stat_name for DNS name clusters 2026-11-09 @tsaarni 🙏 @tsaarni: "Thank you for contributing!"
Lima: official repository of a CNCF incubating project
lima-vm/lima
limactl edit: warn when changing the VM type of an existing instance 2026-11-05 @AkihiroSuda
Lima: official repository of a CNCF incubating project
lima-vm/lima
limayaml: don't panic when the latest config fails to load 2026-11-05 @unsuman 🙏 @AkihiroSuda: "Thanks"
Official CNCF Sandbox projects · 5 merged in 2 repos
Project Pull request Merged Merged by Kind words
kube-vip: official repository of a CNCF sandbox project
kube-vip/kube-vip
fix(services): do not treat DHCP placeholder VIPs as shared 2026-11-09 @Cellebyte
Headlamp: official repository of a CNCF sandbox project
kubernetes-sigs/headlamp
backend: auth: Accept a single string groups claim in /me 2026-11-05 @skoeva 🙏 @skoeva: "lgtm, thanks"
Headlamp: official repository of a CNCF sandbox project
kubernetes-sigs/headlamp
frontend: resourceMap: Resolve HTTPRoute parent and backend refs 2026-11-04 @skoeva
Headlamp: official repository of a CNCF sandbox project
kubernetes-sigs/headlamp
frontend: util: Use desired DaemonSet pods as the total 2026-11-04 @skoeva
Headlamp: official repository of a CNCF sandbox project
kubernetes-sigs/headlamp
frontend: resourceMap: Match NetworkPolicy podSelector fully 2026-11-04 @skoeva
Latest merges elsewhere · 15 most recent of 180 (ecosystem, Terraform providers, Helm charts, tools)
Project Pull request Merged Merged by Kind words
equinix/cli fix: read the config file passed with --config 2026-11-10 @ctreatma 🙏 @ctreatma: "Thanks for the contribution!"
goreleaser/goreleaser fix(aur): install every binary of the archive in the default package 2026-11-10 @caarlos0
kreuzwerker/terraform-provider-docker fix(container): read cpus back without replacing the container 2026-11-10 @Junkern 🙏 @Junkern: "Thanks for the PR!"
kokuwaio/helm-charts fix(nginx-php-fpm): use php.service.port for php-fpm and fastcgi_pass 2026-11-10 @monotek
deliveryhero/helm-charts [stable/prometheus-sentry-exporter]: pass the environment values to the container 2026-11-10 @max-rocket-internet 🙏 @max-rocket-internet: "Thanks 🩵"
ionos-cloud/terraform-provider-ionoscloud fix: remove nsg, nfs and wireguard resources from state on 404 2026-11-10 @adeatcu-ionos 🙏 @cristiGuranIonos: "Thanks for creating this!"
deliveryhero/helm-charts [stable/no-chart] ci: pin actions by SHA and set read-only token permissions 2026-11-10 @max-rocket-internet
Falco ecosystem: not the main Falco repository
falcosecurity/falcosidekick
fix(outputs): close the SMTP connection after each message 2026-11-10 bot
kubecolor/kubecolor fix: color pruned resources in kubectl apply --prune 2026-11-10 @prune998
pengovbr/mod-wssei feat: aceita nomeArvore ao criar e alterar documento externo 2026-11-10 @caduvieira
Falco ecosystem: not the main Falco repository
falcosecurity/falcosidekick
fix(outputs): report GCP Cloud Functions and AWS Security Lake metrics under their own names 2026-11-10 bot
kokuwaio/helm-charts fix(visual-regression-tracker): mount the configured env-config and seed secrets 2026-11-10 @monotek
stakater/Reloader fix(handler): treat non-2xx --webhook-url responses as failures 2026-11-10 @msafwankarim
opentelekomcloud/terraform-provider-opentelekomcloud [Fix] Enterprise VPN: remove deleted resources from state on read 2026-11-10 bot
fluent-plugins-nursery/fluent-plugin-out-http Fix broken requests with a gzip-compressed buffer 2026-11-10 @Watson1978 🙏 @Watson1978: "Thanks for the fix and the clear description."

All 180 of them, with filters

In review · 467 open pull requests · browse and filter

  • Official CNCF Graduated: 36 in 16 repos
  • Official CNCF Incubating: 9 in 3 repos
  • Official CNCF Sandbox: 15 in 6 repos
  • CNCF ecosystem: 136 in 61 repos
  • Other: 271 in 155 repos

Projects

  • helm-charts: production-ready Helm charts with secure defaults, Gateway API, HPA/KEDA and schema-validated values, tested and released from CI
  • terraform-aws-platform: opinionated Terraform modules for EKS platforms (VPC, EKS with access entries and Pod Identity, Karpenter), tested with mock providers and laid out for Terragrunt

LinkedIn Email Profile views


Certifications

CKA Terraform Associate AWS Solutions Architect Associate Calico Operator eBPF VMware Double VCP AWS Cloud Practitioner Azure Fundamentals

Platform   Kubernetes EKS Rancher Envoy Istio Cilium

Delivery   Terraform Atlantis Argo CD Helm Jenkins GitHub Actions Ansible

Observability   Prometheus Grafana Datadog

Cloud & code   AWS Azure GCP Go Python Linux


Profile details

Stats Languages Streak

Contributions

Popular repositories Loading

  1. lbarrosby lbarrosby Public

    Profile README

  2. gateway gateway Public

    Forked from envoyproxy/gateway

    Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

    Go

  3. atlantis atlantis Public

    Forked from runatlantis/atlantis

    Terraform Pull Request Automation

    Go

  4. helm-charts helm-charts Public

    Production-ready Helm charts: secure defaults, Gateway API, HPA/KEDA, PDB, topology spread, schema-validated values and tested in CI

    Go Template

  5. node_exporter node_exporter Public

    Forked from prometheus/node_exporter

    Exporter for machine metrics

    Go

  6. cilium cilium Public

    Forked from cilium/cilium

    eBPF-based Networking, Security, and Observability

    Go