I manage 20+ production Kubernetes clusters (200+ nodes) at CERN and automate cloud-native infrastructure, with a focus on GitOps, CI/CD, observability and security.
| Area | Tools |
|---|---|
| Containers & cloud | Kubernetes (CKA), OpenShift, Docker, OpenStack, Helm, Kustomize |
| GitOps, CI/CD & IaC | ArgoCD, Argo Workflows, GitLab CI/CD, Terraform, Cluster API, Puppet |
| Observability | Prometheus, Grafana, OpenSearch |
| Security | HashiCorp Vault, Kyverno, Falco, cert-manager, OIDC |
| Languages | Python, Go, Bash, Java, C/C++, P4 |
- Lima
- #5696: disable copy-on-write for VM disks on btrfs hosts
- OAuth2 Proxy
- #3583: return 403 instead of 500 when the ID token audience is invalid
- Keycloak
- Kubespray
- #13691: default
etcd_secret_changedwhencert_managementisnone
- #13691: default
Most of my day-to-day work lives in CERN's internal GitLab, so it doesn't show up on the contribution graph below.