{"repo":"amirhosssein0/kafka-and-security-lab","free":true,"listed":false,"github":"https://github.com/amirhosssein0/kafka-and-security-lab","clone":"git clone https://github.com/amirhosssein0/kafka-and-security-lab.git","description":"Event-driven notification system on Kubernetes with Kafka (Strimzi) & KEDA autoscaling — secured with Trivy, Checkov, Kyverno, Falco & Velero","language":"HCL","stars":26,"topics":["argocd","checkov","falco","go","helm","kafka","kubernetes","kyverno","security","terraform"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"                    kafka-and-security-lab Event-driven notification system on Kubernetes with Kafka (Strimzi) & KEDA autoscaling — secured with Trivy, Checkov, Kyverno, Falco & Velero --- Kafka & Security Lab Event-driven notification system on Kubernetes with Kafka (Strimzi) & KEDA autoscaling — secured with Trivy, Checkov, Kyverno, Falco & Velero. This project combines a real event-driven architecture (Kafka + KEDA scale-to-zero autoscaling) with a full DevSecOps pipeline (shift-left scanning, admission control, runtime security, and disaster recovery), deployed via GitOps (ArgoCD) on Azure Kubernetes Service. --- Architecture Security layers wrapping the above: Layer Tool When --- --- --- Shift-left (IaC & image scanning) Trivy, Checkov Before deploy (CI) Admission control Kyverno At deploy time Runtime security Falco After deploy (continuous) Backup / DR Velero Scheduled + on-demand --- Tech Stack Category Technology --- --- Messaging Apache Kafka (Strimzi operator, KRaft mode) Autoscaling KEDA (Kafka lag-based, scale-to-zero) Infrastructure Terraform (Azure: AKS, ACR, Key Vault, VNet, Storage) Container orchestration Azure Kubernetes Service (AKS) App packaging Helm GitOps ArgoCD (App of Apps pattern) CI GitHub Actions Image/IaC scanning Trivy, Checkov Admission policy Kyverno Runtime security Falco Backup & DR Velero Secrets Azure Key Vault + Workload Identity (CSI driver) Apps Go (producer, con","default_branch":null,"files":null,"tree":[],"storefront":"/r/amirhosssein0","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/amirhosssein0/kafka-and-security-lab/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}