Results for “kubernetes”

Configures GKE storage including PVCs, PersistentVolumes, Filestore, and GCS FUSE with best practices for production workloads.

Protects stateful GKE workloads by configuring backup plans, restore workflows, and disaster recovery using Backup for GKE.

Manage Amazon EKS clusters, node groups, IRSA, add-ons, and deployments using AWS CLI and eksctl.

Designs and implements CI/CD pipelines with automated testing, build automation, deployment, and rollback strategies.

Installs and configures Apache Airflow via pip or Docker, with guidance on constraints, requirements, and deployment options.

Conduz investigação de incidentes com método: triagem, hipóteses, mitigação, RCA e postmortem, priorizando evidências e confirmação humana.

Manages Azure cloud resources via the Azure CLI, covering authentication, compute, storage, networking, and automation patterns.

Manage AWS EKS clusters, node groups, IRSA, add-ons, and workloads using AWS CLI and eksctl commands.

Configures GKE workload reliability with PodDisruptionBudgets, health probes, topology spread constraints, and graceful shutdown patterns.

Guides Qdrant monitoring setup including Prometheus scraping, health probes, Hybrid Cloud metrics, alerting, and log centralization.

Implements gradual traffic shifting, automated canary deployments with metric analysis, rollback automation, and observability dashboards for progressive releases.

Manage and inspect OPA policies, Gatekeeper constraints, and Rego rules, including discovery, testing, and audit analysis.

Optimize GKE costs by rightsizing workloads, configuring Spot VMs, selecting machine types, and using Committed Use Discounts.

Installs, deploys, runs, validates, troubleshoots, and stops NVIDIA AI-Q Blueprint infrastructure for local or self-hosted servers.

Configure and collect crash dumps for modern .NET applications (CoreCLR and NativeAOT) on Linux, macOS, and Windows, including containers.

Detect container escape attempts using runtime security tools like Falco, Sysdig, and custom seccomp/audit rules.

Designs and implements CI/CD pipelines, automating build, test, and deployment processes with security scanning and deployment strategies.

Configures GKE autoscaling with HPA, VPA, and Node Auto-Provisioning using golden path defaults for cost optimization.

Configures GKE observability with Cloud Logging, Cloud Monitoring, and managed Prometheus for monitoring, logging, and metrics collection.

Mantém a documentação técnica viva no Notion e no repositório, gerando runbooks, inventários, ADRs e procedimentos a partir da infraestrutura real.

Inspect and manage Envoy proxy configuration, cluster health, route tables, and performance stats via the admin API.

Diagnose failed or unhealthy Dynamo deployments by collecting a read-only debug bundle, classifying failures, and providing step-by-step remediation guidance.

Provides expertise in containerization technology, covering container creation, orchestration integration, security hardening, and operational best practices for production workloads.

Detect container escape attempts using Falco, seccomp, and auditd, with rules for privileged containers, Docker socket access, and kernel module loading.

Analyzes AWS EKS clusters, nodegroups, addons, IRSA configuration, and control plane logging using parallel AWS CLI queries with anti-hallucination guardrails.

Coordinates multi-service releases, manages container registries, and sets up CI/CD pipelines across platforms.

Generate production-grade Kubernetes manifests — Deployments with probes and security contexts, Services, Ingress with TLS, HPA, PDB, NetworkPolicy, ConfigMaps, Secrets — with optional Helm charts, Kustomize overlays, Istio mesh, and ArgoCD GitOps

Expert knowledge for Azure Batch development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Batch pools/tasks, autoscale, containers/MPI, storage mounts, or CI/CD for HPC/render workloads, and other Azure Batch related development tasks. Not for Azure HDInsight (use azure-hdinsight), Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Virtual Machines (use azure-virtual-machines).

Plans and configures multi-tenancy on GKE, covering namespace isolation, RBAC planning, resource quotas, LimitRanges, network isolation, and cost allocation.

Automates security scanning for Infrastructure as Code templates using Checkov, tfsec, and KICS to detect misconfigurations before deployment.

Cria e mantém o inventário da plataforma, mapeando contas AWS, clusters, ambientes, bancos e hosts, distinguindo produção de staging para evitar operações arriscadas.

etcd distributed key-value store reference. Backbone of Kubernetes. Covers key-value operations, watch for real-time updates, leases with TTL, atomic transactions, cluster setup, backup/restore, authentication, TLS, and Prometheus monitoring.

etcd distributed key-value store reference. Backbone of Kubernetes. Covers key-value operations, watch for real-time updates, leases with TTL, atomic transactions, cluster setup, backup/restore, authentication, TLS, and Prometheus monitoring.

Configures, optimizes, and troubleshoots GKE ComputeClasses for Spot VMs with on-demand fallback, GPU/TPU targeting, machine family selection, and zone colocation.

Start, query, and stop a TAO inference microservice for a specific network architecture by delegating container execution to the appropriate platform skill.

Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.