I build the cloud platforms teams ship on.
Platform engineer, based near Paris. Landing zones, Kubernetes, OpenBao, on Azure, AWS and GCP: I design these foundations and describe them as code.
What I build
- Landing zones
The foundations of an enterprise cloud on Azure, AWS and GCP: accounts, network, identity and security policies, provided to teams as versioned modules.
Terraform, Azure, AWS, GCP
- Kubernetes
Reliable clusters that are simple to upgrade, mostly on AKS: networking, workload identity, autoscaling, version upgrades.
Kubernetes, AKS
- Secrets and identity
OpenBao as the single source of secrets: applications and pipelines authenticate to it, and no secret is stored in a repository.
OpenBao
- Automation
Images, configuration and pipelines treated as software: reviewed, tested, versioned, then shipped by CI.
Packer, Ansible, GitHub Actions, GitLab CI/CD
- Tooling
Command-line tools that answer the questions dashboards do not.
Go, Rust, Python, Linux
Projects
When the tool I need does not exist, I write it.
egresscost
Attributes network egress cost to individual processes, in real time, on Linux, using eBPF.
Rust, eBPF, Linux
Released
podstart
A kubectl plugin that shows a pod’s startup cascade, step by step.
Go, Kubernetes
In progress
This site
A static Astro site served by Cloudflare Workers, with its zone and its deployment fully described as code.
Astro, Cloudflare Workers, Terraform, GitHub Actions
Released
Latest notes
All notesA personal site, entirely as code
How this site is built, served and deployed, and why the Worker serving it does not contain a single line of script.