Platform Engineer @ MinIO · Kubernetes & High-Perf Infra
Mountain View, Bay Area
Working on MinIO's Kubernetes Operator: maintainer/contributor since 2022.
Key bits I've shipped or fixed:
- Operator STS: Kubernetes native IAM authentication https://github.com/minio/operator/blob/master/docs/STS.md
- CVE-2025-32963 fix: audience scoping for STS (Security Token Service) tokens to block replays
- Spread-zone config for HA Pod placement & erasure coding resiliency SpreadZone
- Guides for EKS exposure, Helm, Prometheus, OpenShift compat
Helm charts work:
- Contributed to Helm charts helm for core MinIO products.
- Involved in enterprise/AIStor Operator charts (licensed: aistor-objectstore-operator, aistor-keymanager-operator, etc.) for advanced features like key management and volumemanager
Also managed publishing and certification:
- AWS Marketplace publisher/manager for MinIO AIStor (easier EKS/subscription-based installs)
- OpenShift OperatorHub certified operators (via Red Hat OLM/Marketplace) for hybrid/OpenShift-native deployments
Also run MinIO's internal multi-cloud R&D setups (AWS-heavy) and datacenter labs:
IaC (Terraform/CloudFormation for clouds, pure K8s for DC), high-speed fabrics (100–400Gbps), physical hands-on (cabling, installs), monitoring (Prometheus/Grafana dashboards for visibility), outage RCA, troubleshooting across envs, secrets management (Keycloak realms, KES policies, CA certs).
Pinned:
- minio/operator — Kubernetes Operator for MinIO clusters (features, Helm, releases, security)
- minio/docs — Official MinIO documentation
Some old public examples of identity + monitoring setups just for fun:
- minio-operator-keycloak: Operator Console SSO with Keycloak (Cert-Manager, realm config, CA secret sharing)
- minio-tenant-keycloak: Tenant-level SSO / OIDC with Keycloak
- keycloak-deployment: Declarative Keycloak on K8s (Operator + CRD + Postgres)
- minio-kes-prometheus: MinIO tenant with KES + Prometheus scraper (ServiceMonitors, automated TLS via Cert-Manager, Vault AppRole for secrets)
If you're digging into MinIO/K8s/storage infra, Keycloak SSO patterns, KES monitoring, Helm for operators, or Marketplace/OperatorHub certifications, feel free to ping.
Thanks for looking.