Skip to content
View tbvl's full-sized avatar

Block or report tbvl

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tbvl/README.md

Thomas Berg von Linde

Platform engineer and architect in Copenhagen. 25 years in software, mostly in systems where downtime is expensive: rail ticketing, pensions, insurance, tax. Independent through Manyfold since 2012.

What I work on

I build and operate Kubernetes platforms: GitOps delivery, observability, identity and secrets, backup and recovery, and the habits around them that keep a platform boring in the good sense.

I also run a production platform of my own on European infrastructure. It is Kubernetes on Talos Linux at Hetzner in Helsinki, delivered with Argo CD, observed with Prometheus, Loki, Tempo and Grafana, with OpenBao for secrets, Keycloak for identity, Velero for backups and Crossplane for tenant provisioning. AI agents handle first-line operations around the clock; I handle what needs a person. The live status, the stack and how it is run are at manyfold.dk.

The platform: Git holds the desired state and Argo CD applies it to a four-layer stack (tenants, network, cluster, infrastructure on Hetzner Cloud in Helsinki). Operations agents answer alerts within a policy and ask the operator for anything else. Backups, break-glass access and a failover DNS zone sit outside the platform.

How delivery, agentic operations and tenant isolation work is drawn out on the Manyfold organisation page.

Recent work

  • Production operations for high-volume citizen letter generation on AWS.
  • Kubernetes platform engineering for the national pension provider.
  • Tech lead and architect on ticketing systems handling more than 2 million transactions a day with sub-150 ms responses; built the Azure platform for the microservices as code.

See details at [LinkedIn](https://www.linkedin.com/in/tbvl/.

About the repositories here

Most of what I write lives in client repositories or in the manyfold-dk organisation, where the platform's running configuration stays private. What can be shared is: manyfold-platform is the platform itself as a reference installation — the components and their configuration, the OpenTofu root that bootstraps a cluster, the platform's own applications, the alert rules and dashboards, and the decisions behind them, everything that is not specific to one installation (Apache-2.0). estate-baseline holds the tooling that keeps a set of repositories to one standard — conformance checks against a version manifest, generated ADR indexes, a publish-check secret scanner and a mailbox for handoffs between coding agents — all failing CI on drift rather than warning. The public forks are tools I run; omarchy-iso carries my patches, the others track upstream. Architecture decisions and write-ups from the platform are published on manyfold.dk.

The estate: the public estate-baseline holds the standard, a private overlay pins it and adds the values, and every repository pulls both. Checks fail rather than warn: a secret scan on every commit, a weekly conformance run over every repository, a publication gate before every public push, and the same vendored rules for every coding agent session.

Contact

manyfold.dk · LinkedIn · thomas@manyfold.dk

Pinned Loading

  1. manyfold-dk/estate-baseline manyfold-dk/estate-baseline Public

    Drift checks and handoffs for a set of repositories run to one standard, by people and by coding agents.

    Python