Projects

This project started as a repository cleanup and turned into a clearer operating model for vSphere infrastructure. The original Terraform repo had grown into a collection of copied root modules. Each site and environment had its own directory with a familiar set of files: main.tf, variables.tf, output.tf, terraform.tfvars, vars.auto.tfvars, vars.env, local state files, and copied templates. That worked while the repo was small, but it made every change harder to review. ...

Discussion space for CI/CD pipeline design work. Topics Validation, planning, and apply stages Helm and Terraform validation strategy Deployment strategy labs Credential handling, resource design, and branch-based promotion Concourse workflows for infrastructure and platform repositories Concourse CI/CD on Windows with Terraform Kafka Streams pipeline managed by Terraform GitOps patterns for infrastructure teams

Discussion space for cloud platform foundation work. Topics Account, project, subscription, and environment organization Networking, IAM, logging, and guardrails Provider-specific operational patterns AWS operational patterns GCP operational patterns

Discussion space for Kubernetes platform operations work: Rancher-managed access, fleet organization, upgrade safety, DNS hygiene, and conventions that keep clusters predictable over time. Topics Rancher-managed fleet organization and cluster standards Upgrade sequencing, rollback planning, and maintenance windows Namespace, ingress, storage, and policy conventions DNS search domain hygiene across multi-site clusters

Discussion space for observability and incident response work. Topics Actionable alerts, useful dashboards, and clear service ownership Log and metric naming conventions Post-incident follow-up tied to measurable system improvements

Discussion space for Packer image pipeline work. Topics Base image hardening, patch cadence, and template retirement Image versioning for rollback, auditability, and change history Validation gates for boot, access, agents, and baseline configuration Image factory workflow with vSphere and Packer

Discussion space for Vault and secrets management work. Topics Vault deployment, initialization, unseal expectations, and runbooks Policy design, authentication methods, and secrets engines Token, lease, audit, backup, and recovery practices

Discussion space for Terraform infrastructure module work. Topics Refactoring a vSphere Terraform repo into environment roots and shared modules Module boundaries that match operational ownership Plan review practices that improve change visibility before apply

Discussion space for vCenter platform administration work. Topics Cluster, datastore, network, template, and permission hygiene VM lifecycle, capacity review, and incident response runbooks Terraform, Packer, Kubernetes node, and backup integration points