Igor Tikhonin

For this project, I built multiple Kubernetes clusters on AWS in development, testing and production environments, Anchore was used for container image inspection. NGINX Ingress Controler along with ALB Ingress Controller exposed services for the outside world. AWS IAM roles were assigned on containers to get access to AWS resources by kube2iam. Kubernetes Cluster Autoscaler took care of scaling up/down of the worker nodes ensuring resources availability for proper pods scheduling. AWS EBS snapshots were created automatically for persistent storage volumes by k8s-snapshots. Istio controlled traffic among all pods within and across cluster namespaces. All logs were sent to Splunk, and DataDog was used for monitoring purposes.

This is an Ansible tasks file, part of an Ansible role, which creates an Amazon Virtual Private Cloud (VPC) with public and private subnets. A NAT Gateway is created for private subnets, and an Internet Gateway is created for public subnets.

Microsoft Dynamics GP is a business accounting software. As part of a bigger cloud migration initiative, I got this project to automate the installation of MS Dynamics GP components on Azure Cloud instances. That was an unorthodox automation job. The challenge was to install and configure a dozen software packages, some of which could be installed "silently" in command line, and some could be installed through GUI only. Some packages wanted to talk to MS SQL server; some packages needed SQL Server Reporting Services. So I used different Powershell modules in the automation scripts such as SQL Server and ReportingServicesTools to work with SQL services. AutoItX was used to simulate keystrokes interacting with GUIs.

Panorama is the centralized management system for the Palo Alto Networks family of firewalls. I had a project where I automated the creation of firewall rules for new cloud deployments. The automation scripts were written in Python. Palo Alto Networks Device Framework (pandevice) Python library was used to interact with Panorama. Firewall rules were created or updated automatically when changes of the cloud infrastructure were detected by Amazon CloudWatch.