Sreeharinath Peetla · DevOps Engineer (Sree DevOps) · Kubernetes, RHOCP, Vault

// pipeline.live

CI/CD Pipeline, end-to-end.

Every commit travels through seven gated stages — from PR validation to production canary — with Snyk vulnerability scanning, SonarQube quality gates, and HashiCorp Vault dynamic secret injection at each environment.

📥

PR Check

~12s

📦

Build

~58s

🔎

SonarQube

~1m 20s

🛡

Snyk Scan

~1m 45s

🧪

Helm Deploy

~2m 30s

🚀

Canary

~4m 00s

✅

Verify

~5m 30s

cicd-pipeline.log — tail -f

// impact.metrics

By the Numbers.

Production outcomes from CIBC and Tata Play — measured business impact, not vanity metrics.

0

Incident downtime reduction

Tata Play · RCA + auto-alerts

0

AWS infrastructure cost saved

Lambda EC2 scheduling

0

Production outages prevented

Proactive Grafana alerts

0

MTTD reduction

CIBC · Prometheus + Grafana

0

MTTR improvement

Fluentd → Kibana correlation

0

Microservices on RHOCP

CIBC · OpenShift 4.x

0

Services with HPA + Cluster Autoscaler

Tata Play · EKS

0

Manual workload reduced

Ansible + Shell automation

// skills.matrix

Tools & Craft.

Hover the sticky notes — they tilt in 3D. Each zone is a colorful workspace pinned to the wall of a real production environment.

AWS

Cloud Platforms

// production workloads

EC2 / VPCEXPERT

4y · networking, scheduling

hover ↻

EC2 / VPC

Provisioned 100s of EC2 instances across dev/stage/prod. VPC design with public/private subnets, NAT gateways, security groups.

4y · networking, scheduling

EKSEXPERT

3y · managed K8s

hover ↻

EKS

Built EKS clusters from scratch. Managed node groups, IRSA, Cluster Autoscaler, and 20+ services in production.

3y · managed K8s

S3 / EBS / EFSEXPERT

4y · stateful storage

hover ↻

S3 / EBS / EFS

Designed S3 bucket policies, lifecycle rules, versioning. EBS for stateful workloads, EFS for shared storage across pods.

4y · stateful storage

LambdaADV

2y · cost automation

hover ↻

Lambda

Built Lambda-based EC2 scheduling scripts — saved 30% on AWS costs at Tata Play by shutting non-prod instances off-hours.

2y · cost automation

IAMADV

3y · least-privilege

hover ↻

IAM

Designed IAM policies, roles, IRSA for K8s service accounts. Enforced least-privilege access across multi-account AWS.

3y · least-privilege

CloudWatchADV

3y · metrics & logs

hover ↻

CloudWatch

Configured CloudWatch alarms, dashboards, log insights. Integrated with SNS for alert routing.

3y · metrics & logs

K8S

Containers & Orchestration

// eks · rhocp · istio

DockerEXPERT

4y · multi-stage builds

hover ↻

Docker

Multi-stage Dockerfiles, distroless images, layer caching. Reduced image sizes 40-60%.

4y · multi-stage builds

Kubernetes (Vanilla)EXPERT

4y · HPA, PV, ConfigMaps

hover ↻

Kubernetes (Vanilla)

Managed K8s clusters — node group scaling, cluster upgrades, ConfigMaps, Secrets, PV provisioning (EBS/EFS).

4y · HPA, PV, ConfigMaps

RHOCP / OpenShift 4.xEXPERT

2y · 15+ microservices

hover ↻

RHOCP / OpenShift 4.x

Deployed 15+ microservices on RHOCP 4.x. Routes, DeploymentConfigs, BuildConfigs, ResourceQuotas, RBAC.

2y · 15+ microservices

HelmEXPERT

4y · chart versioning

hover ↻

Helm

Authored 30+ Helm charts. Per-stage values files (dev→prod). Chart versioning and rollback strategies.

4y · chart versioning

Istio Service MeshADV

2y · mTLS, canary, mirroring

hover ↻

Istio Service Mesh

Implemented Istio traffic mirroring and canary routing for 5+ services. Secured microservices with mTLS.

2y · mTLS, canary, mirroring

HPA / Cluster AutoscalerADV

3y · 20+ services scaled

hover ↻

HPA / Cluster Autoscaler

Configured HPA based on CPU/memory metrics. Cluster Autoscaler for node group scaling during peak traffic.

3y · 20+ services scaled

IaC

Infrastructure as Code

// declarative everything

TerraformEXPERT

3y · EKS, VPC, EBS modules

hover ↻

Terraform

Built reusable Terraform modules for EKS, VPC, EBS. Multi-environment state management with S3 backend.

3y · EKS, VPC, EBS modules

AnsibleEXPERT

3y · playbooks, SSL renewal

hover ↻

Ansible

Automated server provisioning, SSL certificate renewal, health checks. Reduced manual workload 60%.

3y · playbooks, SSL renewal

HashiCorp VaultEXPERT

3y · dynamic secrets, policies

hover ↻

HashiCorp Vault

Vault dynamic secret injection across multi-stage Helm promotion. Centralized policies for least-privilege.

3y · dynamic secrets, policies

YAMLADV

4y · K8s manifests, Helm

hover ↻

YAML

Authored 1000s of lines of YAML — K8s manifests, Helm values, GitHub Actions workflows, Ansible playbooks.

4y · K8s manifests, Helm

Shell / BashADV

4y · automation scripts

hover ↻

Shell / Bash

Shell scripts for ops automation — backup, deploy, monitoring, log rotation. Bash is my second language.

4y · automation scripts

GitADV

4y · branching strategy lead

hover ↻

Git

Led Git branching strategy (feature/release/hotfix) for 15+ developer team. Reviewed PRs, authored runbooks.

4y · branching strategy lead

CI

CI/CD & Observability

// ship & observe

JenkinsEXPERT

4y · declarative & scripted

hover ↻

Jenkins

Built declarative and scripted pipelines. Parameterized builds from Dev through Production.

4y · declarative & scripted

GitHub ActionsEXPERT

3y · PR validation, builds

hover ↻

GitHub Actions

PR validation, container builds, Snyk scanning, gated deployment approvals for Stage/PROD.

3y · PR validation, builds

Prometheus / GrafanaEXPERT

3y · SLOs, alert rules

hover ↻

Prometheus / Grafana

Deployed Prometheus exporters as Helm sidecars. Grafana dashboards and alert rules — MTTD reduced 40%.

3y · SLOs, alert rules

JFrog ArtifactoryADV

2y · image promotion

hover ↻

JFrog Artifactory

Image promotion pipelines from commit to production. Helm chart repository management.

2y · image promotion

SonarQubeADV

2y · quality gates

hover ↻

SonarQube

Quality gates in CI/CD — coverage 87%, 0 critical issues enforced before merge.

2y · quality gates

Snyk / TrivyADV

2y · vulnerability scanning

hover ↻

Snyk / Trivy

Snyk for dependency scanning, Trivy for container images. 0 critical, 0 high enforced in pipeline.

2y · vulnerability scanning

Kibana / FluentdADV

3y · centralized logging

hover ↻

Kibana / Fluentd

Fluentd as DaemonSet forwarding to Kibana. Log-metric correlation improved MTTR 35%.

3y · centralized logging

NexusADV

2y · artifact repo

hover ↻

Nexus

Nexus as artifact repository and Docker registry. Backup and lifecycle policies.

2y · artifact repo

// tech.matrix

Full Stack Matrix.

AWS EKS

Cloud

RHOCP 4.x

Container

Kubernetes

Orchestration

Docker

Container

Istio

Service Mesh

Helm

Package Mgr

Terraform

IaC

Ansible

Config Mgmt

Vault

Secrets

Jenkins

CI/CD

GitHub Actions

CI/CD

JFrog Artifactory

Artifacts

SonarQube

Quality

Snyk

Security

Trivy

Security

Prometheus

Monitoring

Grafana

Dashboards

Kibana

Logs

Fluentd

Logs

Lambda

AWS

EC2 / VPC

AWS

S3 / EBS / EFS

AWS Storage

IAM

AWS Security

CloudWatch

AWS Monitor

Bash / Shell

Scripting

Linux (RHEL/Ubuntu)

OS

Git / GitHub

VCS

Jira / Confluence

Collab

// career.timeline

Experience Pipeline.

Scroll-driven career timeline — every bullet is a production outcome, not a vanity metric.

May 2024 — Present · 2 yr+

System Engineer (DevOps)

CIBC (Canadian Imperial Bank of Commerce) · Bengaluru

Built CI/CD pipelines with Jenkins + GitHub Actions, SonarQube quality gates, JFrog Artifactory, Helm charts for RHOCP releases across DEV → PROD.
Deployed 15+ microservices on RHOCP 4.x with streamlined Routes, DeploymentConfigs, RBAC, and ResourceQuotas.
Implemented Istio traffic mirroring + canary routing for 5+ services with mTLS — reduced MTTD 40% and MTTR 35%.
Led Git branching strategy for 15+ developers; reviewed PRs, authored runbooks in Confluence.

Mar 2022 — Apr 2024 · 2 yrs

Associate System Engineer(DevOps)

Tata Play — DTH Media Platform · Bengaluru

Reduced AWS infrastructure costs by 30% via Lambda-based EC2 scheduling scripts for off-hours shutdown.
Decreased incident downtime by 70% through RCA, automated alerting, and documented remediation playbooks.
Averted 10+ production outages with proactive Grafana + Fluentd → Kibana alerting pipelines.
Configured HPA + Cluster Autoscaler for 20+ services during peak DTH traffic.

// projects.featured

Featured Projects.

Shipped Real Production Systems — powering CIBC and Tata Play.

🚀

Istio Canary

Istio Traffic Mirroring & Canary Platform

Implemented Istio traffic mirroring and canary routing for production testing across 5+ services at CIBC. Secured microservice communication with mutual TLS (mTLS) end-to-end.

Istio RHOCP 4.x mTLS Prometheus

// what I did

Authored VirtualService + DestinationRule manifests for canary + mirror traffic across 5+ banking microservices.
Enforced strict mTLS via PeerAuthentication policies — zero plaintext service-to-service traffic.
Built Grafana dashboards on Istio golden signals (request volume / p95 latency / 5xx rate).
Shipped canary with 10% traffic mirror first, validated metrics, then promoted to 100% with zero rollback.

5+

Services

100%

mTLS

0

Incidents

💰

AWS Cost Optimizer

Lambda EC2 Scheduling for Cost Reduction

Developed Lambda-based EC2 scheduling scripts at Tata Play to shut down non-production instances during off-hours. Reduced AWS infrastructure costs by 30% with zero developer friction.

AWS Lambda EC2 IAM CloudWatch

// what I did

Tagged every EC2 instance with env=dev|stage|prod so the scheduler could decide what to stop.
Wrote Python Lambda triggered by EventBridge at 8pm IST — stops non-prod, starts them at 8am.
Added IAM role with least-privilege ec2:StopInstances / ec2:StartInstances scoped by resource tag.
Built CloudWatch alarm on Lambda errors + monthly cost-explorer report emailed to leads.

30%

Cost Saved

100s

Instances

0

Prod Impact

🛡

Vault Dynamic Secrets

HashiCorp Vault Multi-Stage Secret Injection

Managed multi-stage environment promotion using per-stage Helm values files (values-dev.yaml → values-prod.yaml) with HashiCorp Vault dynamic secret injection at CIBC. Enforced least-privilege via centralized Vault policies.

HashiCorp Vault Helm RHOCP CI/CD

// what I did

Defined per-environment Helm values files (values-dev.yaml → values-prod.yaml) with Vault Agent injector annotations.
Wrote Vault policies granting each microservice only its own secret path — least-privilege enforced.
Lease TTLs: 1h dev, 30m stage, 15m prod — secrets auto-rotate with zero app code changes.
Added CI gate that fails the build if a chart references a static Secret instead of Vault injection.

15+

Microservices

5+

Environments

100%

Dynamic

📊

Observability Stack

Prometheus + Grafana + Fluentd Stack

Integrated full observability stack at CIBC. Deployed Prometheus exporters as Helm chart sidecars, established ServiceMonitors and PodMonitors for Istio metrics. Provisioned Grafana dashboards & alert rules. Deployed Fluentd as DaemonSet → Kibana for log-metric correlation.

Prometheus Grafana Fluentd Kibana

// what I did

Deployed Prometheus via Helm with sidecar exporters in every microservice pod.
Authored ServiceMonitor + PodMonitor CRDs so Istio metrics get scraped automatically.
Provisioned Grafana dashboards and alert rules, reducing MTTD by 40%.
Fluentd DaemonSet on every node → parses JSON logs → forwards to Kibana with namespace index.
Tied log spikes to metric anomalies — MTTR improved by 35%.

40%

MTTD ↓

35%

MTTR ↓

10+

Dashboards

☁

Terraform EKS Provisioning

Terraform AWS EKS Landing Zone

Provisioned AWS infrastructure using Terraform at Tata Play to automate EKS clusters, VPC networking, and EBS volumes for stateful workloads. Standardized reusable modules across dev/stage/prod.

Terraform AWS EKS VPC EBS

// what I did

Wrote reusable Terraform modules for VPC, EKS control plane, and node groups — DRY across 3 environments.
Provisioned EKS clusters with managed node groups, spot + on-demand mix, autoscaler ready.
Set up EBS CSI driver + gp3 storage classes for stateful workloads (databases, queues).
tfvars per env, remote state in S3 + DynamoDB lock — no more drift, no more lost state.

100%

IaC

3

Environments

20+

Services

⚙

RHOCP Microservices

OpenShift 4.x Microservices Platform

Deployed 15+ microservices on RHOCP 4.x clusters at CIBC. Streamlined OpenShift resource provisioning (Routes, DeploymentConfigs, BuildConfigs) and enforced namespace lifecycles, ResourceQuotas, and RBAC.

RHOCP 4.x Helm RBAC JFrog

// what I did

Authored Helm charts for 15+ microservices with values-dev.yaml → values-prod.yaml overlay pattern.
Standardized Routes, DeploymentConfigs, BuildConfigs across teams — one chart, many environments.
Enforced ResourceQuotas + LimitRanges per namespace — no runaway pod can starve neighbors.

15+

Services

100%

RBAC

5+

Environments

// system.design

Core Architecture.

“From Whiteboard to Production — Same System, Different Lens. The regulated banking platform at CIBC, shown here only as a conceptual model.”.

Users / Branches

→

OpenShift Route (TLS)

→

Istio Ingress Gateway

mTLS Sidecar (Envoy)

→

15+ Microservices (RHOCP)

→

HashiCorp Vault (dynamic)

Prometheus (sidecar)

→

Grafana + Alert Rules

→

Fluentd → Kibana

CI/CD: GitHub Actions

→

JFrog Artifactory

→

Helm + per-stage values

// day.in.life

A Day in the Life.

Switch tabs to see real morning / midday / evening workflows. These are actual commands I run in production.

~/work — zsh

// github.activity

Open Source & Activity.

Contribution graph (last 26 weeks) + language breakdown. Always shipping — at work and on side projects. (Private repos excluded).

Contribution Activity

@sreeharinathp →

0

Commits (26w)

0

Repositories

0

PRs Merged

Languages

view →

YAML

38%

HCL

22%

Shell

15%

Python

10%

Dockerfile

8%

Go

4%

Groovy

3%

// education & languages

Education & Languages.

Academic foundation and languages — the roots beneath the engineering career.

B.Tech

Anantha Lakshmi Institute of Technology & Sciences · Anantapur

B.Tech — Electrical & Electronics Engineering

May 2016 — Jun 2020 · Aggregate: 65%

IN

Native

Telugu

Native proficiency

EN

Professional

English

Professional proficiency

// blog.teaser

Engineering Notes.

Production war stories — the kind of posts I wish I'd read before I had to figure this stuff out the hard way.[Comming Soon]

// kubernetes

RHOCP 4.x RBAC Patterns That Actually Scale

After onboarding 15+ microservices at CIBC, here are the namespace-lifecycle, ResourceQuota, and RBAC patterns that survived contact with reality.

8 min read · 2025 read →

// istio

Istio Traffic Mirroring Without Breaking Production

Dark traffic mirroring is a superpower — until it isn't. Lessons from running 5+ canary services with mirrored traffic on RHOCP.

12 min read · 2025 read →

// aws

Lambda EC2 Scheduling: 30% AWS Cost Cut in a Weekend

How a 200-line Lambda function saved Tata Play 30% on AWS infrastructure with zero developer friction and zero production impact.

6 min read · 2024 read →

// vault

HashiCorp Vault Dynamic Secrets: A Migration Playbook

Moving from static K8s Secrets to Vault dynamic injection across multi-stage Helm promotion. What broke, what worked, what we'd do differently.

10 min read · 2025 read →

// observability

MTTD 40%, MTTR 35%: Building the Observability Stack

From Prometheus sidecars to Grafana alert rules to Fluentd → Kibana log-metric correlation. The full CIBC observability rollout.

14 min read · 2025 read →

// cicd

Gated CI/CD: From PR to PROD Without the Stress

GitHub Actions + Snyk + SonarQube + JFrog + Helm + gated approvals. The 7-stage pipeline that ships 15+ banking microservices safely.

9 min read · 2025 read →

// terminal.live

SSH in.

Type a command — try help, whoami, skills, projects, availability, or sudo hire sree.

sree@portfolio — zsh

sree@portfolio:~$ whoami

Sreeharinath Peetla — Senior DevOps Engineer (4+ yrs)

Status: Available for hire · Replies within 24h

Type 'help' to list commands.

sree@portfolio:~$

// contact.connect

Knock, knock.

Doorbell → Paper plane → Inbox magic. Subscribe for DevOps updates

Hey there,

If you're hiring for a DevOps / SRE / Platform Engineer role — or just want to talk shop about Kubernetes, Vault, or CI/CD — I'd love to hear from you.

Ring the bell on the right →

(Or email me directly. I reply within Minutes.)

— Sree

@

Email

sreeharinathp@gmail.com