Farouk El Hamdi

As part of my mission at VIAMEDIS, I was tasked with designing, deploying, and optimizing a "Cluster-as-a-Service" platform for developers, using Tanzu Kubernetes Grid Service (TKGS) and a GitOps approach. The main objective was to provide a robust and automated platform for developers while managing and securing their access.

Planning of the cluster topology, including the distribution of master and worker nodes, and determination of storage and network requirements

Implementation of a GitOps strategy for the deployment and management of TKGS cluster configurations, ensuring complete traceability and automatic rollback in case of faulty configurations.

Installation and configuration of the kapp controller to facilitate application deployment on TKGS, Contour, Prometheus, Grafana, and cert-manager to ensure cluster monitoring and performance management.

Definition and implementation of specific rules in Alertmanager for proactive incident response.

Implemented Prometheus federation to centralize monitoring of multiple clusters.

Designed a robust GitLab CI pipeline to orchestrate the automated deployment of TKC clusters and the entire monitoring toolchain.

Developed and integrated Bash scripts to automate various infrastructure tasks, enhancing deployment efficiency

Created a "Readiness" environment for developers, simplifying the deployment and management process for applications

Established clear and automated access procedures to ensure developers could access the resources they needed while maintaining security.

Implementation of best practices for securing TKGS clusters, including workload isolation, RBAC policy implementation, and secret management.

As Tech Lead at Cocktail, I successfully led the complete migration of 50 applications developed in Java and WebObjects. My mission encompassed the coordination of the entire process, from initial planning to final deployment using GitOps. I worked closely with the database, network, development, and testing teams to ensure a smooth and efficient transition. My role included defining best deployment practices, managing inter-team dependencies, and ensuring consistency across the various system components.

Implementation, configuration, and deployment of Rancher clusters

Implementation of the Kasten solution: definition and validation of the DAT:

Containerization of Java, Spring Boot type applications using Kubernetes technology based on the GitOps approach.

Deployment of applications via Artifactory

Automation of Kubernetes secret management with KubeSeal and VAULT.

Testing of new updates with a Canary deployment.

Deployment of applications in AppsOfApps mode.

Implementation of CI/CD pipelines for packaging and testing Helm and Kubernetes applications.

Management of a team of system engineers and DevOps engineers. We were a tooling team, primarily responding to development team requests, and I worked closely with the security team. We deployed in an Airgap environment (managing applications for microscopes).

Customization of Helm charts.

Automation of K3S and K3D installation through shell scripts.

Management of Kubernetes pods on dedicated nodes (GPU).

Creation and injection of self-signed certificates into Kubernetes clusters.

Setup of a local Docker registry.

Packaging of Kubernetes manifests for Postgres, Minio, Redis, and RabbitMQ in disconnected Kubernetes mode.

Testing of new updates with a Canary deployment.

GitOps: Application deployment with ArgoCD.

Deployment of applications on Artifactory.

Setup of K8S, K3D, K0S clusters in disconnected mode.

Development of a Python SDK to automate the DevOps chain.

SSO configuration.

Implementation of S3-compatible storage solutions.

Implementation of backup solutions for Kubernetes clusters.

CROSS CLOUD & CROSS REGION Workload Migration