---
title: "Amit Malhotra (@buoyantcloudinc) | Hashnode"
description: "Amit Malhotra (@buoyantcloudinc) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@buoyantcloudinc"
---

@buoyantcloudinc

# Amit Malhotra

@buoyantcloudinc · Toronto, Canada · Joined March 2026

### [Multi-Cluster GKE Migration with Istio: Implementation Guide](https://buoyantcloudinc.hashnode.dev/multi-cluster-gke-migration-with-istio-implementation-guide?utm_source=hashnode&utm_medium=feed)

Learn how to migrate Kubernetes workloads to GKE incrementally using multi-cluster Istio service mesh for secure cross-cluster communication.

6 min read · [buoyantcloudinc.hashnode.dev](https://buoyantcloudinc.hashnode.dev/multi-cluster-gke-migration-with-istio-implementation-guide?utm_source=hashnode&utm_medium=feed)

[May 6](https://hashnode.com/posts/multi-cluster-gke-migration-with-istio-implementation-guide/69fb65422ede113ef60d77a3)

### [GKE Gateway API for Production Traffic Management Guide](https://buoyantcloudinc.hashnode.dev/gke-gateway-api-for-production-traffic-management-guide?utm_source=hashnode&utm_medium=feed)

Learn to implement GKE Gateway API to replace Kubernetes Ingress. Handle canary deployments, multi-domain TLS, and cross-namespace routing in production.

5 min read · [buoyantcloudinc.hashnode.dev](https://buoyantcloudinc.hashnode.dev/gke-gateway-api-for-production-traffic-management-guide?utm_source=hashnode&utm_medium=feed)

[Apr 29](https://hashnode.com/posts/gke-gateway-api-for-production-traffic-management-guide/69f22965628efa345f19241c)

### [GKE Hardening: Secrets Injection & Control Plane Access](https://buoyantcloudinc.hashnode.dev/gke-hardening-secrets-injection-control-plane-access?utm_source=hashnode&utm_medium=feed)

Production-ready guide to securing GKE clusters with Secret Manager integration and DNS-based IAM control plane access. Fix common audit findings.

6 min read · [buoyantcloudinc.hashnode.dev](https://buoyantcloudinc.hashnode.dev/gke-hardening-secrets-injection-control-plane-access?utm_source=hashnode&utm_medium=feed)

[Apr 22](https://hashnode.com/posts/gke-hardening-secrets-injection-control-plane-access/69e8e41dea1228c2e7d4863e)

### [IAM Recommender + BigQuery for Zero Trust at Scale](https://buoyantcloudinc.hashnode.dev/iam-recommender-bigquery-for-zero-trust-at-scale?utm_source=hashnode&utm_medium=feed)

Automate least privilege enforcement across GCP orgs using IAM Recommender and BigQuery. Track over-privileged roles and SOC 2 compliance at scale.

6 min read · [buoyantcloudinc.hashnode.dev](https://buoyantcloudinc.hashnode.dev/iam-recommender-bigquery-for-zero-trust-at-scale?utm_source=hashnode&utm_medium=feed)

[Apr 1](https://hashnode.com/posts/iam-recommender-bigquery-for-zero-trust-at-scale/69cd32bd820f787be29823f7)

### [Eliminate GCP Service Account Keys with Workload Identity](https://buoyantcloudinc.hashnode.dev/eliminate-gcp-service-account-keys-with-workload-identity?utm_source=hashnode&utm_medium=feed)

Learn how to remove static GCP service account keys using Workload Identity Federation for GitHub Actions, GKE, and developers—keyless auth.

5 min read · [buoyantcloudinc.hashnode.dev](https://buoyantcloudinc.hashnode.dev/eliminate-gcp-service-account-keys-with-workload-identity?utm_source=hashnode&utm_medium=feed)

[Mar 25](https://hashnode.com/posts/eliminate-gcp-service-account-keys-with-workload-identity/69c3f711edbfba4c6d4d549c)