Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (193)AI & LLMs (143)Backend & APIs (102)Web Development (90)ERP Systems (77)Security (65)Software Development (58)Career Reflections (29)Cloud (29)AI / Machine Learning (18)Product & SaaS (12)University (1)Hackathons (1)

AIOctober 202612 min read

Kubernetes Agent Sandbox CRD: Isolated Stateful AI Agents

Kubernetes Agent Sandbox CRD explained: Sandbox, SandboxTemplate, SandboxClaim and WarmPool for isolated stateful AI agents, with gVisor and tuning traps.

AIOctober 202612 min read

Kubernetes AI Conformance: What the KARs Demand of a Platform

Kubernetes AI conformance explained: what KARs demand, the v1.35 to v1.37 checklist diff, the test suite's silent skips and what a badge does not prove.

DevOpsOctober 202612 min read

kube-proxy ipvs Deprecated: Migrate to nftables by v1.40

kube-proxy ipvs mode is deprecated: off by default in v1.40, removed in v1.43. A sourced nftables migration plan with kernel checks, config and breakage.

SecurityOctober 202612 min read

Kubernetes 1.36 Security Changes: userns, kubelet, gitRepo

Kubernetes 1.36 security changes: user namespaces GA, fine-grained kubelet authz, gitRepo removed, externalIPs deprecated, and a Monday audit script.

SecurityOctober 202612 min read

Kubernetes Manifest-Based Admission Control Beta in 1.37

Kubernetes 1.37 graduates manifest-based admission control to Beta: staticManifestsDir loads webhooks and CEL policies from disk, even when etcd is down.

DevOpsOctober 202612 min read

Kubernetes MCP Server: read_only, Toolsets, Denied Resources

Lock down the Kubernetes MCP server so an agent cannot helm uninstall: a view ServiceAccount, read_only, toolsets and denied_resources, tested on v0.0.67.

Showing 73–78 of 818 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications