DevOps / SRE engineer focused on Kubernetes, GitOps and observability. I contribute to CNCF projects (Kyverno, KEDA, Argo CD, OpenTelemetry) and I am preparing for LFX Mentorship and Google Summer of Code 2027.
- Platforms: Kubernetes (GKE, AKS, EKS, k3s), Docker
- IaC & GitOps: Terraform, ArgoCD, Argo Rollouts, Helm
- Observability: Prometheus, Grafana, Loki, Alloy, SLO / burn-rate alerting
- CI/CD & Cloud: GitHub Actions, GCP, AWS, Azure
- Languages: Go, Python, Bash
How I find work to do: I diff what the code accepts (struct tags, CLI flags, ConfigMap keys) against what the docs describe, and I pick up maintainer-filed bugs that nobody has claimed. Every change below comes with a test that fails before the fix and passes after it.
| Project | Change | Status |
|---|---|---|
| kyverno/kyverno#18571 | CLI --set dropped any value containing = (URLs, base64); split on the first = only, regression tests, package AGENTS.md |
open |
| kyverno/reports-server#362 | APIService reconciler issued three no-op updates every 10s because spec.service.port was left for the apiserver to default; set it explicitly, tests assert the DeepEqual converges |
open |
| kyverno/reports-server#363 | Streaming-list watches (sendInitialEvents) never sent the k8s.io/initial-events-end bookmark, so client-go reflectors hung; implemented across all six Watch handlers with a shared helper |
open |
| kyverno/reports-server#365 | GOMEMLIMIT was hardcoded to 100% of the memory limit (OOM kills, not overridable); replaced with automemlimit at 90%, flags and chart values |
open |
- kedacore/keda#8358: Datadog scaler ignores
activationQueryValuewhenuseClusterAgentProxyis on (readsactivationTargetValueinstead) - kedacore/keda#8359: Solace Direct Messaging scaler accepts four
activation*parameters that nothing reads
- Kyverno: missing container flags + typo, VAP reports opt-in label and paramKind RBAC
- KEDA: undocumented scaler parameters, Solace DM targets and MongoDB TLS
- Argo CD: 15 missing
argocd-cmd-params-cmkeys, with corrections from code review on CSP, X-Frame-Options and gRPC limits - OpenTelemetry Collector:
block_on_overflowand three more component options found with the same audit
- docdrift - Finds configuration options that exist in Go code (struct tags, flags, ConfigMap keys) but are missing from the docs; the tool behind the contributions above
- gcp-gke-platform - GKE Autopilot platform: Go microservice, Terraform, GitHub Actions (WIF) CI, ArgoCD GitOps, Managed Prometheus SLOs
- terraform-cloud-blueprints - Production-minded Terraform modules for AKS and EKS with mock-provider tests, tflint and checkov in CI
- observability-slo-stack - SLOs as code on k3s: kube-prometheus-stack, Loki, Alloy and multi-window multi-burn-rate alerts
- homelab-gitops - Single-node k3s homelab managed with ArgoCD app-of-apps and Argo Rollouts canary delivery
- gcp-gemini-rag-agent - DevOps on-call agent: Google ADK + Gemini on Vertex AI, runbook RAG, Cloud Run, Terraform
Open to DevOps / SRE / Platform Engineering opportunities. Feel free to connect here on GitHub.