Sign In

Jean-Philippe Evrard

Provides strategic advice to companies working with open source software. Relying on my technology and business expertise.

Jean-Philippe Evrard is a seasoned professional in the fields of technology and software development, currently working as a Technical Lead, Product Owner, Architect, and Security Liaison in a freelance capacity. Based in the Brussels Metropolitan Area, he has extensive experience in open-source projects, particularly with OpenStack, where he has been an active contributor since 2015. Evrard has held significant roles, including being the Project Team Leader (PTL) for OpenStack-Ansible, which showcases his leadership and collaborative skills across various projects within the OpenStack ecosystem.123

His expertise spans multiple domains, including:

  • Cloud Infrastructure: Involvement in various OpenStack services such as Compute (Nova), Networking (Neutron), and Object Storage (Swift).
  • Configuration Management: Specialization in tools like Ansible and Helm for deploying OpenStack.
  • Security Practices: Acting as a liaison for security measures within projects.

Evrard is recognized for his problem-solving abilities and commitment to enhancing collaboration across different teams and organizations within the tech community.124 His LinkedIn profile further highlights his interest in roles that require a founder or CTO-level expertise, indicating his capability to guide startups or scale-up operations effectively.2

Highlights

Jul 31 · linkedin

Hello platform engineering folks. I got a few hours and I wrote some code I had in mind for a while. The question I have for you: Would you be interested by this project?

Here is the idea: Integrated Kubernetes Operator for Secure (external systems) Multi-Tenant Resource Management

The elevator pitch:

"Enhance your Kubernetes multi-tenancy strategy with an integrated operator that seamlessly manages custom resources requiring elevated (tenant admin) privileges. Unlike external workflow systems that need broad access across clusters, this solution provides a secure, in-cluster approach. By leveraging mTLS and Kubernetes-native CRDs, the operator ensures that sensitive operations are isolated and managed centrally, reducing attack surfaces and simplifying compliance. This Kubernetes-native solution offers real-time responsiveness, direct control, and efficient resource management without compromising on security, making it ideal for enterprises looking to streamline their multi-tenant infrastructure."

Key Differentiators:

  1. Security:

    • Integrated Operator: Keeps all sensitive operations isolated using Kubernetes-native mechanisms and your own code, in the language of your choice, leveraging our standard tools like mTLS for secure communication.
    • External Workflow Systems: Often require broad access across clusters, potentially increasing security risks and complicating access control.
  2. Efficiency:

    • Integrated Operator: Directly interacts with Kubernetes APIs, reducing latency and dependency on external systems. Write 2 parts (implement one interface in go for the operator side, implement one rpc system for the provisionner in the language of your choice) and external asset management is solved for your platform team.
    • External Workflow Systems: May become complex due to the amount of workflows to manage.
  3. Control:

    • Integrated Operator: Provides granular, role-based access control (RBAC) within Kubernetes, ensuring precise control over who can access and manage resources. Grant your users admin access to the cluster (remove cert rights) without risks.
    • External Workflow Systems: Typically involve additional layers of permissions, which can complicate access management.
  4. Simplicity and Compliance:

    • Integrated Operator: Offers a simple, in-cluster solution with native auditing and security features, facilitating easier compliance with regulatory requirements.
    • External Workflow Systems: Often require complex integrations, which can make compliance and auditing more challenging.
Mar 11 · linkedin

If you are (or know) a ClusterAPI Provider OpenStack developer present at KubeCon, let me know. I would be interested to meet!

Related Questions

What are some of the key projects Jean-Philippe Evrard has contributed to in OpenStack?
How did Jean-Philippe Evrard become involved in OpenStack?
What is the role of a PTL in OpenStack?
Can you provide examples of Jean-Philippe Evrard's contributions to OpenStack?
What are the main challenges Jean-Philippe Evrard has faced in his role at OpenStack?
J
Add to my network

Location

Brussels Metropolitan Area