Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3525 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52
Kyverno Architecture Internals: Kubernetes-Native Policy Engine
Deep dive into Kyverno architecture internals. Covers its design as a Kubernetes-native policy engine, Admission Controller/Background Controller/Reports Controller architecture, webhook configuration, ClusterPolicy vs P
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internals[Virtualization] 10. The Future of Virtualization: From Confidential Computing to GPU Disaggregation
A comprehensive look at the future of virtualization technology, covering confidential computing, ARM virtualization, GPU disaggregation, WebAssembly, Kata Containers, and unikernels.
2026-03-20 · 11 min read #virtualization#kubernetes#gpu[Virtualization] 07. NVIDIA GPU Operator: Automating GPU Management on Kubernetes
A detailed guide on using NVIDIA GPU Operator to automatically manage GPU drivers, runtime, device plugins, and monitoring on Kubernetes.
2026-03-20 · 8 min read #virtualization#kubernetes#gpu[Virtualization] 04. Complete Guide to GPU Virtualization: Passthrough, vGPU, MIG, SR-IOV
Comprehensive comparison of GPU Passthrough, vGPU (NVIDIA GRID), MIG, SR-IOV, and Kubernetes time-slicing for GPU virtualization.
2026-03-20 · 9 min read #virtualization#infrastructure#cloud[Virtualization] 01. Virtualization Fundamentals: Type 1 vs Type 2 Hypervisors
Core virtualization concepts, differences between Type 1 and Type 2 hypervisors, and a comparison of full virtualization, paravirtualization, and hardware-assisted virtualization.
2026-03-20 · 8 min read #virtualization#infrastructure#cloud[Prometheus] TSDB Internals: WAL, Chunks, Blocks, Compaction
Source code level analysis of Prometheus TSDB internals. Deep dive into WAL segment structure, Head Block memSeries, chunk encoding (XOR, delta-of-delta), block structure, compaction algorithms, and posting list indexing
2026-03-20 · 10 min read #prometheus#observability#open-source-internals[Prometheus] Architecture Internals: Source Code Level Deep Dive
A source code level analysis of Prometheus server internals. Deep dive into the Scrape Manager, TSDB, Rule Manager, Notifier, Web UI components, their goroutine models, lifecycle management, and configuration reload mech
2026-03-20 · 8 min read #prometheus#observability#open-source-internalsKyverno vs OPA/Gatekeeper: Policy Engine Comparison
Compare Kyverno and OPA/Gatekeeper from architecture, policy language, features, performance, and ecosystem perspectives. Covers YAML/CEL vs Rego, mutation/generation support, image verification, webhook latency, memory
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno Image Verification: Sigstore and Supply Chain Security
Deep dive into Kyverno image verification capabilities. Covers verifyImages rules for cosign signature verification, Notary v2 support, in-toto attestation verification, SLSA provenance checking, Keyless/KMS key manageme
2026-03-20 · 15 min read #kyverno#policy#security#open-source-internalsKyverno Policy Engine Analysis: Validate, Mutate, Generate Rules Deep Dive
Deep dive into Kyverno policy engine internals. Covers match/exclude resource filters, validate rules (pattern matching, deny, CEL, foreach), mutate rules (patchStrategicMerge, patchesJson6902), generate rules (clone, sy
2026-03-20 · 14 min read #kyverno#policy#security#open-source-internalsIstio Security Model Analysis: mTLS, Authentication, Authorization
Analyzes the internal implementation of the Istio security model. Covers certificate lifecycle, mTLS handshake flow, PeerAuthentication, RequestAuthentication, AuthorizationPolicy internals, and external authorization in
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Ambient Mesh Internals: Service Mesh Without Sidecars
Analyzes the internal architecture of Istio Ambient Mesh. Covers ztunnel L4 processing, waypoint proxy L7 processing, HBONE tunneling, eBPF traffic interception, and performance comparison with sidecars.
2026-03-20 · 8 min read #istio#service-mesh#open-source-internals[Golden Kubestronaut] KCNA Extra 30 Practice Questions - Advanced Cloud Native
30 additional practice questions for the KCNA (Kubernetes and Cloud Native Associate) exam. Covers CNCF project ecosystem, cloud native patterns, service mesh, GitOps, eBPF, Wasm, Backstage, Crossplane, Dapr, and more.
2026-03-20 · 15 min read #kubernetes#golden-kubestronaut#kcna#certification[Golden Kubestronaut] CKAD Extra 30 Practice Questions - Advanced Scenarios
30 additional advanced scenario questions for CKAD exam preparation. Covers advanced multi-container patterns, Helm chart troubleshooting, CRD usage, admission webhooks, API deprecation migration, advanced probes, epheme
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#ckad#certification[Golden Kubestronaut] CCA Practice Exam 80 Questions - Cilium Certified Associate ♪ Listenable
80 practice questions for achieving Golden Kubestronaut via CCA. Covers all domains: eBPF, Cilium networking, security, service mesh, and Hubble observability.
2026-03-20 · 27 min read #kubernetes#golden-kubestronaut#cilium#ebpf#ccaIstio Traffic Management Engine Deep Dive
Analyzes how Istio traffic management works internally. Covers VirtualService to Envoy RouteConfiguration translation, load balancing algorithms, circuit breakers, retries, and fault injection Envoy implementations in de
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Architecture Internals: Control Plane and Data Plane
A deep dive into Istio service mesh internal architecture. Explores istiod control plane, Envoy sidecar injection mechanisms, xDS protocol, filter chains, and workload identity at the code level.
2026-03-20 · 9 min read #istio#service-mesh#open-source-internalsHelm Plugins and Testing Strategies: Extensibility and Quality Assurance
Analyze Helm plugin system and chart testing strategies. Covers plugin.yaml structure, helm-diff/helm-secrets/helm-unittest plugins, helm test, ct (chart-testing) tool, helm lint, values.schema.json schema validation, an
2026-03-20 · 14 min read #helm#kubernetes#open-source-internals[Golden Kubestronaut] KCSA Extra 30 Practice Questions - Advanced Cloud Native Security
30 additional practice questions for the KCSA (Kubernetes and Cloud Native Security Associate) exam. Covers supply chain security (SLSA, Sigstore), runtime security (Falco, Tetragon), zero trust, SPIFFE/SPIRE, image sign
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#kcsa#certification#security[Golden Kubestronaut] CKS Extra 30 Practice Questions - Advanced Security Scenarios
30 additional advanced security scenario questions for CKS exam preparation. Covers Falco rules, Trivy/Grype image scanning, OPA/Gatekeeper advanced policies, AppArmor/Seccomp profiles, Pod Security Standards, RuntimeCla
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#cks#certification#security