GitOps delivery
- Argo CD ApplicationSets pointing at Kustomize overlays
- Image promotion by tag (dev → stg → prod) in Git
- Helm-in-Kustomize: charts fetched at sync, not vendored in the repo
- CI → GitOps handoff: the pipeline builds; the cluster syncs
Services
What I offer
Project work or ongoing retainers. Everything below is what I operate — not a logo wall.
Kubernetes platforms
- EKS, on-prem Kubernetes, and lab clusters in one catalog
- Cilium (kube-proxy replacement) and Gateway API
- Node and workload autoscaling
- Predictable AppProjects, namespaces, and sync policy
Edge: ingress, DNS, and TLS
- Ingress NGINX, ALB, or Gateway API depending on the cluster
- cert-manager (HTTP-01 and DNS-01)
- external-dns on Route53 or Cloudflare
- Hostnames and certificates kept out of the app overlay when they belong to the platform
Observability
- Metrics with VictoriaMetrics or Prometheus
- Logs with Loki / Promtail
- Grafana as the single surface
- Cluster cost (OpenCost) when it earns its keep
Data plane
- Kafka (Strimzi), CDC, queues (RabbitMQ), and MQTT (EMQX)
- Redis / KeyDB and PostgreSQL with an operator
- Connectors and workers as GitOps apps, not snowflakes
Platform engineering
- Internal registry, Vault, in-cluster quality gates
- CI/CD contract: build produces the artifact; Git records the desired state
- Architecture docs for the team, not for the tool