Integrated all Cloudera k8s services with Istio service mesh.
Implemented Zero trust network for k8s control plane using cert-manager and vault PKI.
Worked on a front-proxy which provides connectivity to workloads running in customer's private VPC.
Enabled High Availability to the customer services by implementing monitoring using cadence workflows.
Improved monitoring, debugability and resource consumption by implementing tracing, metrics dashboards and alerts.
Implemented service that generates SSL certificates for all public-facing endpoints. Integrated with Zerossl(CA) to provide resilience for generating SSL certs.
Worked to deploy and setup Istio-service mesh, vault and cert-manager. Implemented perimeter security along with automation of renewal of TLS certificates.
Implemented service modules which allows k8s services in control plane to workloads in customer's private network over a secure channel.