Kubernetes platforms: Istio mesh and clusters

I have spent nine years building the Kubernetes platforms other teams run on, most of it in Go.

Salesforce, service mesh. I worked on the mesh operator that generates and manages Istio configuration for a fleet of about 1,000 production clusters. I owned sharding the Istio control plane to support 50,000 pods: shard selection when a workload is admitted, automated shard installs, and the rollout. I also built global rate limiting at the ingress gateway, with a shadow mode so new limits are observed before they are enforced. On call, I traced production failures down to the proxy, such as a 401 caused by a WASM auth filter that compared token claims case-sensitively.

VMware, edge clusters. I extended Cluster API so small edge Kubernetes clusters could upgrade nodes in place instead of replacing them.

NetApp, host management. I built the host management system's controller from scratch in Go and owned it end to end, including the Kubernetes operator behind it. I also built an API for managing sudoers configuration that made onboarding easy for Linux admins, helped move the product to SaaS, and wrote Go services that provisioned whole Kubernetes clusters on GCP. The services talked to each other over gRPC.