Senior Site Reliability Engineer at Red Hat. Former Principal Engineer specializing in OpenShift Networking — OVN-Kubernetes, Service Mesh, DNS, and Ingress routing. I publish interactive architecture references, hands-on lab guides, and deep-dive technical content across OpenShift, Tekton CI/CD, AI/MCP, and security.
Architecture maps · Stack deep-dives · Published guides · Art of Exploitation
| Playlist | Topics Covered |
|---|---|
| Konflux Pipeline Blueprints | Konflux CI on OpenShift — install, build, sign, integration test, release, SLSA provenance, Enterprise Contract |
| Tekton Field Guide | Tekton architecture, Tasks, Pipelines, Workspaces, Triggers, Chains, Pipelines as Code |
| Guide | Interactive Reference |
|---|---|
| Konflux Pipeline Blueprints | ay-garg.github.io/konflux-pipeline-blueprints |
| Tekton Field Guide | ay-garg.github.io/tekton-field-guide |
| OpenShift 4 Architecture | ay-garg.github.io/OpenShift_4_Architecture |
| OpenShift 4 DNS Architecture | ay-garg.github.io/OpenShift-4-DNS |
| OpenShift Service Mesh 3 | ay-garg.github.io/OpenShift_Service_Mesh_3 |
| Repository | Description | Reference |
|---|---|---|
| konflux-pipeline-blueprints | Hands-on Konflux CI guide with production-ready YAML blueprints — build pipelines, release pipelines, integration tests, and Enterprise Contract policies on OpenShift | Guide · Playlist |
| tekton-field-guide | Apply-ready Tekton reference for Kubernetes-native CI/CD — Tasks, Pipelines, Workspaces, Triggers, Chains, and a full container build pipeline | Guide · Playlist |
| openshift-mcp-server | MCP server exposing 216 tools, 7 resources & 10 SRE runbook prompts for OpenShift 4 cluster management via any MCP-compatible LLM across 20 operational domains | — |
| OpenShift_4_Architecture | Interactive OpenShift 4 architecture reference covering control plane, networking, storage, and day-2 operations | Guide |
| OpenShift4-AWS-BareMetal-UPI | Detailed procedure to deploy an OCP 4 BareMetal UPI cluster on AWS using CloudFormation — bootstrap, masters, and workers | Blog Post |
| must-gather-analysis | Automated cluster health checks and root-cause analysis from must-gather bundles | — |
| OpenShift-Service-Mesh-Secured-Gateway | Secured ingress gateway implementation using OpenShift Service Mesh (Istio) | — |
| collect-tcpdump-ocp | DaemonSet-based tcpdump capture across all cluster nodes for network troubleshooting | — |
Platform & Cloud
CI/CD & GitOps
Languages
Observability
AI & MCP
Networking & Security

