Skip to content
View Athang69's full-sized avatar
🇮🇳
Contributing
🇮🇳
Contributing
8 followers · 23 following

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: YOLOAchievement: Quickdraw

Highlights

  • Pro

Block or report Athang69

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Athang69/README.md

Athang Kali · Systems Engineer · Cloud Native / Backend · Open Source Contributor

I work on systems software, mostly in Go and C++, close to the metal: kernel-level programming, container orchestration internals and distributed agents. Most of that work happens in the open, across CNCF projects. Final year B.Tech, and I spend most of it writing code that ships.

Open to software engineering roles in Systems, Cloud Native and Backend.


Right now

Selected as an LFX Mentee with CNCF for 2026 Term 3, building the visual and operational layer of the Headlamp Kyverno plugin, the interface operators use to manage Kyverno policies from inside the CNCF Kubernetes dashboard.

Policy Impact Map · violation drill-down · Prometheus integration · CEL-based policy views · i18n and accessibility


Open source

31 pull requests merged into CNCF projects, with 17 more in review.

Project Merged In review
kubernetes-sigs/headlamp CNCF Kubernetes dashboard 21 4
kubearmor/KubeArmor CNCF runtime security 10 9
headlamp-k8s/plugins Headlamp plugin catalogue 0 4
Selected contributions

Headlamp, across the React frontend, the Helm layer and the Go backend. Crashes, routing, release integrity and test coverage.

  • Fixed a CronJob detail-view crash, and a portforward handler that exposed userID suffixes in responses.
  • Fixed a test that overwrote the real user kubeconfig.
  • Broke a circular frontend import by moving cluster hooks to api/v1/hooks, unblocking static analysis.
  • Added authenticated Helm repository support, enabling private registry workflows.
  • Hardened isValidRedirectPath against whitespace and URL-encoded protocol bypass.
  • Added cosign keyless signing for release checksums.
  • Raised pkg/config test coverage from 74.2% to 83.9%.

KubeArmor, on correctness in the enforcement and container lifecycle paths, plus supply-chain hardening.

  • Raised the OpenSSF Scorecard from 0/10 to 6/10 by introducing Renovate and pinning every dependency.
  • Fixed containerd exit-event handling by unmarshalling through the TaskExit type.
  • Updated Go dependencies to clear known security vulnerabilities.
  • Added unit tests for the main package and stabilised intermittent blockposture CI failures.
  • Added openEuler 24.03 LTS-SP3 to the supported platform matrix.

Selected work

Distributed Linux Fleet Management · C++ Drogon systemd Prometheus

Host-monitoring platform with a lightweight agent streaming live /proc and /sys metrics. Zero-touch systemd onboarding registers a new node from one generated shell command, and remote execution is secured with HMAC-SHA256 request signing and constant-time verification.

File Encrypter / Decrypter · C++ POSIX RAII

Recursive directory encryption driven by a producer-consumer task queue, parallelised with POSIX fork(). RAII smart pointers move file-stream ownership across the IO, Task and ProcessManagement layers.

URL Shortener API · Go Fiber Redis Docker

Sub-10ms redirects via Redis O(1) lookups with TTL expiry. Per-IP rate limiting runs on a dedicated Redis database, logically isolated from link storage, so abuse never touches redirect throughput.

Expense Tracker · React Node MongoDB Chart.js

Full-stack expense manager with Chart.js breakdowns, JWT auth and bcrypt-hashed passwords. Reworked MongoDB queries cut read latency by ~15%. (live)


Stack

Languages      Go · C++ · TypeScript · JavaScript · SQL · Shell · Python
Cloud native   Kubernetes · eBPF · Kyverno · KubeArmor · CEL · Docker · Helm
Supply chain   SLSA · OpenSSF Scorecard · cosign · Renovate · GitHub Actions
Backend        Node.js · Express · Fiber · Drogon · REST · WebSocket
Data           PostgreSQL · MongoDB · MySQL · Redis · Prisma
Observability  Prometheus · Grafana · Node Exporter

Elsewhere

athangkali.me · LinkedIn · X · LeetCode · athangkali21@gmail.com

Banner stats are generated from the GitHub and LeetCode APIs and refresh daily, see scripts/gen_hero.py.

Pinned Loading

  1. kubernetes-sigs/headlamp kubernetes-sigs/headlamp Public

    A Kubernetes web UI that is fully-featured, user-friendly and extensible

    TypeScript 7.3k 1.1k

  2. KubeArmor KubeArmor Public

    Forked from kubearmor/KubeArmor

    Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

    Go

  3. file_encrypter_decrypter file_encrypter_decrypter Public

    A file Encryptor & Decryptor Written in C++

    C++ 1

  4. shorten-url-fiber-redis shorten-url-fiber-redis Public

    Built a containerized URL shortener API in Go using Fiber and Redis, with custom short-code support, per-IP rate limiting, TTL-based link expiry, and redirect handling optimized for low-latency loo…

    Go

  5. Expense-Tracker Expense-Tracker Public

    BackEndURL: https://expense-tracker-a6yf.onrender.com/

    JavaScript

  6. Linux-Fleet-Management-System Linux-Fleet-Management-System Public

    SETU Project of Linux Fleet Management System

    C++