LRA CloudOps LRA CloudOps Get in touch
Open Source · lra-cloud-ops

Platform Engineering
for production workloads.

Infrastructure as Code, Kubernetes, GitOps and AI orchestration — open source foundations, production-grade delivery. Solo practitioner. Full-stack platform engineering.

✓ Production-grade  ·  ✓ AWS · Azure · GCP  ·  ✓ Open Source  ·  ✓ Healthcare infrastructure

AI Agents
8 specialized · 14 integrations
AWS
EKS · RDS · ECR · VPC
Kubernetes
kubeadm · Calico · ArgoCD
Terraform
7 modules · dev/prod
GitOps
ArgoCD · Helm · sync
github.com/lra-cloud-ops · 4 repos · Python · Terraform · Bash · HCL
last scan: 4.2s · 0 critical
All systems operational last scan: 4.2s · 0 critical 33/33 tests passing

A platform stack, not a portfolio

Four repositories. Four production-grade capabilities. One platform.

01

Client Interface

lracloudops.com

Entry point for infrastructure audit requests. The contact form triggers lra scan via webhook dispatch to GitHub Actions.

02

AI Orchestration

lra-ai-platform

Multi-agent platform implementing a Supervisor → TaskPlanner → GovernanceEngine → AgentManager execution model with 5 RBAC levels.

03

Cloud Infrastructure

aws-terraform-devops · aws-devops-agent

Seven modular Terraform configurations provisioning VPC, EKS, RDS, ECR, IAM, CloudWatch and S3 on AWS eu-west-1. Natural language AWS operations via 31-function tool-use agent.

04

Container Runtime

k8s-on-premise

Multi-node Kubernetes cluster bootstrapped with kubeadm. Calico CNI, NGINX Ingress, Helm add-ons, ArgoCD GitOps sync.

Open Source Platform

Four capabilities. Inspect the code.

View all →

Engagement model

From assessment to operations — a repeatable engineering process.

01

Assess

lra scan — Trivy and Checkov analysis across your codebase. Report within 24 hours.

02

Architect

VPC topology, compute tier, data layer and security boundaries — designed around your workload.

03

Engineer

Terraform, Kubernetes, ArgoCD — defined in code, deployed declaratively.

04

Operate

Monthly security scans, drift detection and platform reviews.

Platform Engineering in practice

Real implementations across infrastructure, platform and AI layers.

AI Agents

Automate DevOps with specialized AI agents

lra-ai-platform provides 8 specialized agents — Cloud Architect, Security Engineer, SRE, and more — each executing operations via 14 integrations with AWS, Kubernetes, Terraform and Ansible.

Explore lra-ai-platform →
Intent TaskPlanner DAG Plan Governance RBAC · Policy 5 levels Agents Founder Cloud Arch DevOps Security SRE Tools AWS K8s Terraform Trivy GitHub 8 agents active 14 integrations 33 tests passing operational

AWS Infrastructure

Production-ready AWS infrastructure with Terraform

aws-terraform-devops delivers a complete AWS environment: VPC with multi-AZ subnets, EKS 1.31 cluster, RDS PostgreSQL 15, ECR registry, and a Flask app deployed via Helm and managed by ArgoCD.

Explore aws-terraform-devops →
AWS VPC — eu-west-1 Internet ALB HTTPS EKS 1.31 Flask · Helm ArgoCD sync RDS PostgreSQL 15 Terraform 7 modules Multi-AZ: eu-west-1a · eu-west-1b · eu-west-1c infrastructure operational S3 + DynamoDB state backend 71 commits

Kubernetes

On-premise Kubernetes cluster from scratch

k8s-on-premise builds a multi-node Kubernetes cluster using kubeadm on Vagrant/VirtualBox. Calico CNI, NGINX Ingress, Helm, and ArgoCD GitOps sync included.

Explore k8s-on-premise →
k8s-on-premise · kubeadm v1.31 · Vagrant/VirtualBox control-plane kube-apiserver etcd · scheduler 192.168.56.10 worker-1 kubelet · containerd Calico CNI ArgoCD pod 192.168.56.11 worker-2 kubelet · containerd Calico CNI NGINX Ingress 192.168.56.12 ArgoCD GitOps sync enabled · self-heal: true · prune: true 3 nodes ready Helm · Metrics Server · local-path-provisioner 25 commits

Security

Automated security scanning with Trivy and Checkov

The Security Engineer agent in lra-ai-platform runs Trivy for container and IaC vulnerabilities and Checkov for Terraform, Kubernetes and Dockerfile misconfigurations — generating a PASS/FAIL report automatically.

lra-ai-platform — security scan EXPLORER ▾ lra-ai-platform ▾ agents security_engineer.py cloud_architect.py devops_engineer.py ▾ tools trivy_tool.py checkov_tool.py ▸ workflows ▸ api terminal security_review.log $ lra scan --github lra-cloud-ops/aws-terraform-devops → Cloning repository... → Detecting stack: terraform, docker, k8s TRIVY — Container & IaC vulnerabilities ✓ Critical: 0 ✓ High: 0 ⚠ Medium: 2 → auto-documented CHECKOV — IaC misconfigurations ✓ Terraform: 47/50 passed ✓ Dockerfile: 8/8 passed ⚠ K8s manifests: 3 warnings ✓ SCAN COMPLETE — PASS · 4.2s ⎇ main Python 3.11 lra-ai-platform UTF-8

Natural Language AWS

Manage AWS in natural language with an AI agent

aws-devops-agent uses an AI model in a tool-use loop to query and manage 24 AWS services. Ask questions in plain English or Spanish and retrieve data directly from your AWS account.

aws-devops-agent · AI tool-use loop EXPLORER ▾ aws-devops-agent agent.py .env requirements.txt README.md AWS TOOLS (31) list_ec2_instances check_security_groups get_rds_instances list_eks_clusters get_monthly_cost ... +26 more agent.py terminal You: What EC2 instances are running? AI → calling list_ec2_instances(region=eu-west-1) i-0a1b2c3d t3.medium running prod-api-server i-0e4f5a6b t3.small running staging-worker You: Any dangerous security groups? AI → calling check_security_groups() ✓ No open 0.0.0.0/0 rules on critical ports ⚠ sg-0a1b: port 22 open — review recommended ⎇ main Python 3.11 31 tools · 24 AWS services AI model

Engineering Capabilities

Platform Engineering capabilities

Defined by what they enable in production.

Infrastructure as Code

Seven modular Terraform configurations deploy a complete AWS environment: VPC, EKS 1.31, RDS PostgreSQL 15, ECR, IAM, CloudWatch, S3. Multi-AZ, least-privilege IAM, automated backups.

↗ aws-terraform-devops

Container Orchestration

Kubernetes on AWS EKS and bare-metal kubeadm. Calico CNI, NGINX Ingress, ArgoCD GitOps with auto-sync and self-healing. Same declarative patterns at different infrastructure layers.

↗ k8s-on-premise

GitOps Delivery

GitHub Actions for CI. ArgoCD for continuous delivery. Every manifest change triggers lint, test, security scan and declarative cluster sync. No manual deployments.

↗ aws-terraform-devops

Security Automation

lra scan executes Trivy (CVE detection) and Checkov (IaC misconfiguration analysis) on every repository. Findings classified by severity with AI-generated remediation.

↗ lra-ai-platform

AI Agent Orchestration

Eight specialized agents with deterministic task planning and 5-level RBAC governance. Integrations include Terraform, Kubernetes, Ansible, AWS, Trivy and Checkov via tool-use APIs.

↗ lra-ai-platform

Cloud Operations

Tool-use agent with 31 boto3 functions covering EC2, EKS, RDS, IAM, S3, CloudWatch and 18 additional AWS services. Natural language queries return real-time API responses.

↗ aws-devops-agent

Cloud platforms

The platform runs on any major cloud provider. Infrastructure modules are cloud-portable — consistent architecture regardless of deployment target.

EKS RDS ECR VPC IAM CloudWatch S3 DynamoDB

Start with a free infrastructure audit.

Submit a GitHub repository. Receive a complete security and IaC analysis within 24 hours. No commitment required.

LRA CloudOps

DevOps advisor · online

Hi! I'm the LRA CloudOps advisor. Ask me about DevOps, AWS, Kubernetes or our services.