work
Selected projects and contributions.
A compact ledger of product work, open-source contributions, and platform experiments worth pointing back to.
-
HSA Butler
My learning playground for building a real product end to end, and a personal tool used by me and a couple of friends. It organizes HSA expenses, receipts, tax-year context, and assistant-backed review workflows while giving me a place to practice product, AWS, frontend, backend, and AI implementation work.
-
Venafi Vault PKI plugin
Two merged contributions to certificate lifecycle management in the Venafi Vault PKI plugin. Fixed explicit certificate revocation by accepting serial-number input, normalizing stored identifiers, and using the certificate thumbprint required by Venafi Cloud. Added a local certificate delete endpoint so operators can clean up stale records in Vault without triggering revocation in CyberArk Certificate Manager, with support for wildcard certificate names, regression tests, and usage documentation.
-
Istio and ambient mesh work
Hands-on Istio and service-mesh projects around ambient mesh, mTLS/Lua filter experiments, and policy patterns for user-token and automation-token authorization. A larger Istio project writeup is coming here next.
-
OpenShift and Kubernetes infrastructure
Architecture notes and prototypes around OpenShift app-team migration paths, StorageGRID/S3 access, CSI storage mechanics, and the practical boundary between platform abstractions and application code.
-
OpenMeshGuard
An open-core service mesh governance and posture platform starting with Istio. The concept focuses on continuously verifying mTLS, authorization, gateway exposure, ownership, exceptions, drift, lifecycle, and audit evidence across clusters.