Restauranty — Azure AKS DevOps Platform
Containerized microservices platform, deployed and operated on Azure Kubernetes Service, with an AI assistant wired into live cluster and security data.
- Designed and operated a production-style Kubernetes platform on Azure AKS for a containerized microservices application (React frontend, 3 Node/Express services, MongoDB), with images in Azure Container Registry.
- Built CI/CD foundations with GitHub Actions and passwordless Azure OIDC authentication — reducing reliance on long-lived cloud credentials — plus Kubernetes Ingress, DNS and TLS/HTTPS for externally accessible REST APIs.
- Implemented observability with Prometheus, Grafana, Loki and Grafana Alloy across infrastructure, application and security events.
- Integrated a Cowrie SSH/Telnet honeypot with an AI-assisted operational interface that retrieves platform health and recent security events.
- Performed Trivy vulnerability scanning — surfaced real HIGH/CRITICAL findings in application images.
- Diagnosed deployment failures involving Kubernetes networking, authentication, MongoDB connectivity, application dependencies and resource configuration, using kubectl, logs, events and Linux tooling.
"Instead of manually going through logs, the goal was to ask ‘are my pods healthy?’ or ‘what commands did the attacker execute?’ — the assistant routes the request to an approved operation and returns a human-readable answer, never raw shell or database access."