Pinecone Pulumi IaC & Zero-Trust

Core Accomplishments

• Infrastructure as Code Optimization: Designed and built the infrastructure for the next-generation Pinecone cloud platform in Pulumi with Python, shrinking the codebase size by 10x.
• Security & Isolation Refactoring:
  • Removed public IP addresses from CloudSQL database instances.
  • Implemented static egress IPs for secure, auditable outbound connections.
  • Replaced long-lived cloud access credentials with GCP Workload Identity.
  • Terminated SSL in the cloud load balancer (instead of the ingress controller) to improve query visibility and reduce network latency.
• GitOps Continuous Delivery: Deployed GitOps pipelines utilizing Flux CD after testing Anthos Config Sync and ArgoCD, simplifying application deployments.