Context
The Direction Générale de l’Aviation Civile (DGAC) manages French airspace and aviation safety. I designed and built the technical architecture to migrate their legacy applications running on virtual machines to a modern containerized platform in a fully disconnected (air-gapped) environment.
Responsibilities
- Conducted technical workshops for project roadmap, requirements gathering and architecture design
- Produced Low Level Design (LLD) and High Level Design (HLD) architecture documents
- Automated prerequisites: HAProxy, DNS, DHCP, TFTP, HTTP server configuration using Ansible
- Deployed OpenShift 4 clusters in disconnected (air-gapped) bare-metal mode on HP servers
- Configured all cluster components: logging (Loki/Vector), monitoring (Prometheus), internal registry, CI/CD pipelines, Ceph storage (block, object, file via ODF)
- Implemented multi-tenant security: authentication, RBAC, privilege management, network policies
- Managed application containerization, CI pipeline integration and ArgoCD-based deployment
- Implemented application security and network flow filtering within the cluster
- Set up backup/restore management with Kasten K10
- Wrote installation and operations documentation
Key Achievements
- Successfully deployed a fully air-gapped OpenShift cluster — no internet connectivity required
- Migrated 30+ legacy applications to containers with minimal disruption
- Established a repeatable deployment process reusable for future clusters
Technical environment: HP Bare-metal, OpenShift 4, GitLab, Artifactory, Ansible, Loki, Vector, ArgoCD, Kasten K10, Ceph Storage (ODF), Prometheus, Helm