Donald Sebastian Leung

Linux | Kubernetes | Infrastructure | Security

Subscribe:

About

I am an engineer with 4 years of IT experience specialized in delivering Linux and Kubernetes-based infrastructure solutions.

In my current role as a Cloud Technical Specialist at Enfinity Solutions, a leading SI firm and reseller based in Hong Kong, we propose, architect, deliver and maintain infrastructure solutions for our customers with robust backup and DR planning and execution. Our solutions span across public, private and hybrid cloud; across containers, VMs and bare metal; across countless sectors and industries. With data protection built into our solutions from day 1, our customers can achieve peace of mind knowing that their critical business data is in safe hands and resilient against ransomware disasters.

In my spare time, I upskill by taking various online courses and certifications. For example, I am:

Microsoft certified (Azure Administrator Associate)
Former CKA + CKAD certified (expired)
Various IT certifications

See my LinkedIn profile for details.

Blog

2025-04-20: Implementing Pod-to-Pod encryption with Istio Ambient Mesh
2025-04-13: Uncovering a reverse shell attack in real time
2025-03-04: Understanding the security benefits of eBPF-based vs. traditional service meshes
2025-01-19: Operating Kafka at scale with Strimzi
2024-12-28: Enforcing recommended practices on Kubernetes with ValidatingAdmissionPolicy
2024-06-09: Protecting stateful workloads on Kubernetes with Kanister
2024-02-25: Deploying Keycloak on Fedora Workstation with Podman
2024-02-13: Running workloads at the edge with MicroK8s
2024-01-14: Exploring OpenShift with CRC
2023-12-26: Running stateful workloads on Kubernetes with Rook Ceph
2023-11-14: Investigating a failed VolumeSnapshot with NFS on Kubernetes
2023-09-16: Configuring an IPsec VPN connection with OpenIKED
2023-09-12: Configuring a simple router with OpenBSD
2023-08-25: Evaluating and securing your Kubernetes infrastructure with kube-bench
2023-08-19: Scanning and remediating vulnerabilities with Grype
2023-08-02: Implementing continuous delivery pipelines with GitHub Actions
2023-07-29: Enabling local project collaboration with Gitea
2023-07-20: Securing your Kubernetes workloads with Sigstore
2023-07-15: Patching a directory traversal attack vulnerability
2023-07-15: Migrating my personal website to an event-driven serverless architecture

Contact and social media

GitHub: DonaldKellett | GitHub
GitLab: donaldsebleung | GitLab
Gitee: donaldsebleung | Gitee
LinkedIn: donaldsebleung | LinkedIn
Email:
- Hong Kong, Macau and overseas: donaldsebleung@gmail.com
- Chinese Mainland: donaldsebleung@qq.com
Phone:
- Hong Kong: +852 5119 1681
- Chinese Mainland: +86 1302 6622 791