Implementation of a Scalable Kubernetes Cluster with GitOps

Developed a highly available Kubernetes cluster with GitOps to optimize application delivery and development processes

• Set up the Amazon EKS cluster using AWS CDK, including automated tests with Jest to ensure correct configuration.

• Established a GitOps workflow with Flux to manage automated, versioned deployments from Git. Changes to the repository are immediately rolled out to Kubernetes, eliminating manual steps and enabling faster, reproducible deployments.

• Implemented OIDC and RBAC for secure authentication and authorization.

• Used Helm and Kustomize for dynamic, versioned Kubernetes deployments.

• Developed and integrated CI/CD pipelines with GitLab that interact seamlessly with the GitOps process and automatically roll out deployments from the repository.

• Fully automated deployments without manual intervention by DevOps engineers -> drastic reduction in deployment times.

• Improved consistency and traceability of infrastructure changes by combining GitOps and CDK.

• Increased security and compliance through end-to-end authentication (OIDC & RBAC) and versioned infrastructure deployments.

• More efficient development processes as teams push their changes directly via Git and Flux ensures secure, automated distribution.

• Technologies used: AWS IAM, AWS EKS, AWS EC2, AWS VPC, AWS S3, OIDC, RBAC, AWS CloudWatch, AWS CloudFormation, AWS Fargate, GitOps (Flux), GitLab, TypeScript, AWS CDK, Helm, Kustomize, Jest.

The client's service team wanted to set up an automated cloud infrastructure with clearly defined processes for Infrastructure-as-Code (IaC) and introduce maintainable CI/CD pipelines. They also required a standardized AMI image creation for Windows and Linux using EC2 Image Builder.

• Automated the GitLab Runner infrastructure (setup, updates, and operations).

• Introduced AWS CDK for creating and managing IaC templates.

• Developed CI/CD pipelines tailored flexibly to client requirements.

• Integrated EC2 Image Builder to automate Windows and Linux AMI image provisioning - published as InnerSource under Free4All in GitLab.

• Conducted workshops & enablement for the service team.

• The service team now has a full CI/CD infrastructure and can independently deploy IaC templates as well as preconfigured Windows and Linux images.

• The introduction of AWS CDK and EC2 Image Builder led to simplified management and scaling of the infrastructure.

• The deployment time for new server instances was significantly reduced by using preconfigured AMIs.

• Technologies used: AWS IAM, AWS EC2, AWS SAM, AWS Step Functions, AWS VPC, AWS S3, AWS CloudTrail, AWS CloudWatch, AWS AutoScaling, AWS SSM, EC2 Image Builder, Windows Server 2022, PowerShell, AWS Fargate, GitLab, TypeScript, AWS CDK, Citrix.

• Developed strategy and managed company operations.
• Advised on cloud technologies with a focus on AWS and Kubernetes.
• Led automation projects and CI/CD pipeline implementations.

A client wanted to migrate their entire IT infrastructure to the AWS public cloud to benefit from greater scalability, cost efficiency, and flexibility. The migration covered large systems and needed to happen without disrupting ongoing operations.

• Collaborated in an internal, agile team at the client (Scrum and Kanban).

• Built CI/CD pipelines to automate resource provisioning.

• Advised on best practices for migration, including setting up monitoring and security solutions.

• Collaborated in an agile team at the client (Scrum and Kanban).

• Trained internal developer teams on using the new cloud environment.

• Introduced CI/CD pipelines that reduced resource provisioning time.

• Improved scalability: The infrastructure is now flexible to growing demands.

• Technologies used: AWS IAM, AWS EC2, AWS OpsWorks (Chef), AWS VPC, AWS VPN, AWS S3, AWS S3 Glacier, AWS Route 53, AWS Step Functions, AWS CloudTrail, AWS CloudWatch, AWS CloudFormation, AWS API Gateway, AWS Lambda, AWS SNS, AWS SQS, AWS Auto Scaling, AWS SSM, Windows Server, AWS RDS, AWS KMS, AWS ECS, AWS Config, AWS DynamoDB, AWS CloudFront.

• Conducted training for AWS, VMware, and Microsoft.
• Advised clients and spoke to audiences of up to 500 attendees.

• Six-month assignment on the ElsaPro project through Pesavento Consulting
• Full-time position on the Backend Services team since June 2013

• Journalistic reporting for Computec Media, games.ch, and Online-Welten GmbH

• Creating editorial content
• Maintaining contacts with publishers and obtaining review copies