Skip to content
View be0x74a's full-sized avatar
🎧
🎧

Organizations

@projection-operator

Block or report be0x74a

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
be0x74a/README.md

Diogo Vilela

Senior Software Engineer / Tech Lead based in Switzerland. I build and ship Kubernetes platform tooling β€” operators, kubectl plugins, distribution channels β€” for the engineers who have to live with them.

The IC craft is the headline; the lead role is what happens when you stay close enough to the code to write the tools your team needs.


What I work on professionally

Currently Tech Lead at Nexthink in Lausanne, in the Data Platform group β€” leading a team of senior engineers responsible for the traffic in and out of the platform: endpoint ingestion, configuration distribution, and update delivery across 20M+ connected endpoints globally. The work spans Kubernetes, Apache Kafka, and cloud-native Java microservices.

The platform operates at:

  • >1M messages/s ingested from 20M+ devices
  • >150K notifications/s delivered back to those devices

Currently leading:

  • Dynamic configuration propagation to the endpoint fleet
  • Refactoring the downstream communication channel β€” the >150K notifications/s path from platform to endpoints

Previously led:

  • Observability improvements across the platform
  • The autoscaling pilot using KEDA for the ingestion path

Previously a software engineer in Sky's Global Commerce department, on the systems behind NOW, Peacock, SkyShowtime, and Showmax β€” including:

  • Part of Peacock's exclusive AFC Wild Card Game stream β€” the biggest live-streamed event in the U.S., consuming 30% of internet traffic during the game
  • Building a Kubernetes controller for cluster-wide audit logging of user actions
  • Launching 2 streaming services across 66 territories
  • Leading the introduction of Chaos Engineering in the department

Featured open-source work

projection β€” Kubernetes CRD for declarative resource mirroring

github.com/projection-operator/projection Β· docs.projection.sh

A kubebuilder-based CRD operator that mirrors arbitrary Kinds β€” ConfigMaps, Secrets, custom resources β€” across namespace boundaries. Declarative, conflict-safe, watch-driven. Built for the recurring multi-tenant cluster pattern where the same configuration needs to live in many namespaces and the alternatives (manual copies, init scripts, CI templates) all fail in ways that are hard to debug.

Ships under Apache-2.0 with its own docs domain so it can be adopted without friction.

kubectl-xctx β€” multi-context kubectl execution

github.com/be0x74a/kubectl-xctx

A kubectl plugin that runs commands across every context matching a regex β€” kubectl xctx 'prod-.*' get pods returns answers from fifteen clusters instead of one. Distributed via my own krew tap:

kubectl krew index add be0x74a https://github.com/be0x74a/krew-index.git
kubectl krew install be0x74a/xctx

Building the distribution channel β€” the krew index, the release pipeline, the install path β€” taught me as much as building the tool itself.

github-pr-quick-approve β€” keystroke-to-approval browser extension

github.com/be0x74a/github-pr-quick-approve Β· Chrome Web Store

A Chromium extension that collapses GitHub's five-click PR approval flow into one keystroke. Built because I review a lot of PRs and the friction was eating real time. The kind of internal-developer tool that quietly compounds.


Upstream open-source contributions

Contributions to projects in the Kubernetes ecosystem:


What ties this work together

  • Multi-context, multi-tenant ergonomics. The kubectl plugin and the CRD operator solve the same problem in different layers: making one engineer effective across many namespaces, or many clusters, without per-tenant exceptions.
  • Distribution is part of the design. The krew tap, the homebrew tap, the Apache-2.0 license, the docs domain β€” those are infra decisions made up-front because the barrier to adoption is the product.
  • Boring-by-design. Watch-driven controllers, conflict-safe mirroring, declarative semantics β€” these projects are optimized for "stop being interesting after week one" rather than for cleverness.

Currently exploring

  • CRD ergonomics beyond projection. Stronger admission-time guarantees and a multi-cluster story are the next questions I'm chasing.
  • AI as a force-multiplier in platform work. buddy is my exploration of running personal LLM workflows end-to-end (Android + self-hosted backend) β€” the question I'm chasing is what platform tooling looks like when an agentic helper is part of the design instead of a layer on top.

Get in touch

Based in Switzerland. Open to platform / Kubernetes / cloud-infrastructure conversations.

Pinned Loading

  1. projection-operator/projection projection-operator/projection Public

    The Kubernetes CRD for declarative resource mirroring across namespaces β€” any Kind, conflict-safe, watch-driven.

    Go 2

  2. kubectl-xctx kubectl-xctx Public

    Execute kubectl commands across multiple contexts matching a regex

    Go 10

  3. github-pr-quick-approve github-pr-quick-approve Public

    Chromium extension to approve GitHub PRs with a configurable keyboard shortcut

    JavaScript

  4. PSMA PSMA Public

    Programmable Sandbox for Malware Analysis

    Python 1 1