I work on Kubernetes internals and security, mostly in CNCF projects: controllers, admission, policy engines and autoscaling.
Merged in Kyverno, KEDA and PipeCD, with fixes in review at Volcano, Kubeflow, kgateway, OpenKruise and KubeEdge.
Some of my work:
- Fixed a gRPC connection leak in KEDA's external scaler (#8193, with tests in #8213)
- Made the Kyverno CLI evaluate namespaced validating policies, which were passing while checking nothing (#17608, backported in #17612)
- Fixed PipeCD ECS rollbacks that reported Synced while still running the old revision (#7412)
- Found that the scheduler config in the Volcano v1.15.0 release notes makes gang reclaim evict the same job endlessly; fix in review (#6046)
- Found that restarting PipeCD's piped in the middle of a deployment cancelled it and ran the rollback; fix in review (#7443)
- Built sigstore-guard, an admission webhook that only lets in pods whose images are signed by an accepted signer