Argo CD control plane
A single management cluster that owns the delivery state of every downstream cluster. App-of-apps at the root, projects scoped per team, and sync windows so a regional deploy never lands during that region's peak hour.
Projects
Things I have built and run
Mostly internal platform work. The descriptions are deliberately about the shape of the problem and the decisions behind it, not the client.
Multi-region application repositories
One repository per region, one identical directory contract inside each. A service is onboarded by adding a values file; the difference between regions is configuration, never a divergent copy of the manifests.
Shared Jenkins pipeline library
A versioned Groovy library covering build, unit test, image scan, push and GitOps commit. Services opt into a template with a handful of parameters instead of maintaining several hundred lines of their own pipeline.
GitLab CI infrastructure templates
Reusable CI components for Terraform plan and apply with environment approval gates, drift detection on a schedule, and a plan summary posted back to the merge request.
Internal Helm chart collection
A small set of well-documented charts — a generic web service, a worker, a cronjob — that cover most workloads. Fewer charts, better defaults, and one place to fix a bad probe configuration for everyone.
Monitoring baseline
Prometheus, Grafana and Loki deployed the same way in every cluster, with dashboards shipped as code and an alert set trimmed down to the ones that have ever been acted on.
Container image standards
A set of base images with a refresh schedule, multi-stage build conventions, and scanning wired into the pipeline so a critical CVE blocks promotion rather than appearing in a monthly report.
Infrastructure as code modules
Terraform modules for networking, clusters and managed databases with remote state, locking, and a review process that treats an infrastructure change like a code change.
No projects match that tag yet.
More detail on any of these?
I am glad to walk through the trade-offs, including the parts that did not work.