Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3517 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 247#career 229#ai 216#llm 208#devops 193#2026-04 146#security 141#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 60#rag 58#self-improvement 55#learning 53#mlops 53#ai-platform 51
Kyverno Image Verification: Sigstore and Supply Chain Security
Deep dive into Kyverno image verification capabilities. Covers verifyImages rules for cosign signature verification, Notary v2 support, in-toto attestation verification, SLSA provenance checking, Keyless/KMS key manageme
2026-03-20 · 15 min read #kyverno#policy#security#open-source-internalsKyverno Policy Engine Analysis: Validate, Mutate, Generate Rules Deep Dive
Deep dive into Kyverno policy engine internals. Covers match/exclude resource filters, validate rules (pattern matching, deny, CEL, foreach), mutate rules (patchStrategicMerge, patchesJson6902), generate rules (clone, sy
2026-03-20 · 14 min read #kyverno#policy#security#open-source-internalsIstio Security Model Analysis: mTLS, Authentication, Authorization
Analyzes the internal implementation of the Istio security model. Covers certificate lifecycle, mTLS handshake flow, PeerAuthentication, RequestAuthentication, AuthorizationPolicy internals, and external authorization in
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Ambient Mesh Internals: Service Mesh Without Sidecars
Analyzes the internal architecture of Istio Ambient Mesh. Covers ztunnel L4 processing, waypoint proxy L7 processing, HBONE tunneling, eBPF traffic interception, and performance comparison with sidecars.
2026-03-20 · 8 min read #istio#service-mesh#open-source-internals[Golden Kubestronaut] KCNA Extra 30 Practice Questions - Advanced Cloud Native
30 additional practice questions for the KCNA (Kubernetes and Cloud Native Associate) exam. Covers CNCF project ecosystem, cloud native patterns, service mesh, GitOps, eBPF, Wasm, Backstage, Crossplane, Dapr, and more.
2026-03-20 · 15 min read #kubernetes#golden-kubestronaut#kcna#certification[Golden Kubestronaut] CKAD Extra 30 Practice Questions - Advanced Scenarios
30 additional advanced scenario questions for CKAD exam preparation. Covers advanced multi-container patterns, Helm chart troubleshooting, CRD usage, admission webhooks, API deprecation migration, advanced probes, epheme
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#ckad#certification[Golden Kubestronaut] CCA Practice Exam 80 Questions - Cilium Certified Associate
80 practice questions for achieving Golden Kubestronaut via CCA. Covers all domains: eBPF, Cilium networking, security, service mesh, and Hubble observability.
2026-03-20 · 27 min read #kubernetes#golden-kubestronaut#cilium#ebpf#ccaIstio Traffic Management Engine Deep Dive
Analyzes how Istio traffic management works internally. Covers VirtualService to Envoy RouteConfiguration translation, load balancing algorithms, circuit breakers, retries, and fault injection Envoy implementations in de
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Architecture Internals: Control Plane and Data Plane
A deep dive into Istio service mesh internal architecture. Explores istiod control plane, Envoy sidecar injection mechanisms, xDS protocol, filter chains, and workload identity at the code level.
2026-03-20 · 9 min read #istio#service-mesh#open-source-internalsHelm Plugins and Testing Strategies: Extensibility and Quality Assurance
Analyze Helm plugin system and chart testing strategies. Covers plugin.yaml structure, helm-diff/helm-secrets/helm-unittest plugins, helm test, ct (chart-testing) tool, helm lint, values.schema.json schema validation, an
2026-03-20 · 14 min read #helm#kubernetes#open-source-internals[Golden Kubestronaut] KCSA Extra 30 Practice Questions - Advanced Cloud Native Security
30 additional practice questions for the KCSA (Kubernetes and Cloud Native Security Associate) exam. Covers supply chain security (SLSA, Sigstore), runtime security (Falco, Tetragon), zero trust, SPIFFE/SPIRE, image sign
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#kcsa#certification#security[Golden Kubestronaut] CKS Extra 30 Practice Questions - Advanced Security Scenarios
30 additional advanced security scenario questions for CKS exam preparation. Covers Falco rules, Trivy/Grype image scanning, OPA/Gatekeeper advanced policies, AppArmor/Seccomp profiles, Pod Security Standards, RuntimeCla
2026-03-20 · 14 min read #kubernetes#golden-kubestronaut#cks#certification#securityIstio Observability Internals: Metrics, Tracing, Logging
Analyzes the internal implementation of Istio observability. Covers Envoy stats generation, Istio standard metrics, Telemetry API v2, distributed tracing span propagation, access logging, and Kiali/Prometheus/Grafana/Jae
2026-03-20 · 8 min read #istio#service-mesh#open-source-internals[Golden Kubestronaut] CGOA Practice Exam 80 Questions - Certified GitOps Associate
80 practice questions for CGOA toward Golden Kubestronaut. Covers all domains including GitOps principles, ArgoCD, Flux, and Git workflows.
2026-03-20 · 33 min read #kubernetes#golden-kubestronaut#gitops#cgoa#argocd[Golden Kubestronaut] PCA Practice Exam 80 Questions - Prometheus Certified Associate
80 practice questions for PCA (Prometheus Certified Associate) certification toward Golden Kubestronaut. Covers all domains including Prometheus architecture, PromQL, alerting, service discovery, and storage.
2026-03-20 · 33 min read #kubernetes#golden-kubestronaut#prometheus#pca#certification[Golden Kubestronaut] ICA Practice Exam 80 Questions - Istio Certified Associate
80 practice questions for the ICA exam toward Golden Kubestronaut. Covers Istio architecture, traffic management, security, and observability across all domains.
2026-03-20 · 30 min read #kubernetes#golden-kubestronaut#istio#service-mesh#ica[Golden Kubestronaut] CKA Extra 30 Practice Questions - Advanced Scenarios
30 additional advanced scenario questions for CKA exam preparation. Covers etcd backup/restore, kubeadm upgrade edge cases, complex RBAC scenarios, NetworkPolicy troubleshooting, CSI drivers, kubelet configuration, API s
2026-03-20 · 15 min read #kubernetes#golden-kubestronaut#cka#certification[DevOps] Complete Guide to Stub and Mocking Servers: From Concepts to Practice
A comprehensive guide covering the differences between Stub and Mock, comparison of major mocking tools (WireMock, MockServer, json-server, Prism), practical setup, and CI/CD integration.
2026-03-20 · 14 min read #devops#testing#mocking#stub#wiremockHelm Template Engine Deep Dive: Go Templates, Sprig, Named Templates
Deep dive into Helm template engine internals. Covers Go template parsing and execution pipeline, Sprig library functions (string, math, date, crypto, list, dict), named templates with define/template/include, flow contr
2026-03-20 · 6 min read #helm#kubernetes#open-source-internalsHelm Chart Design Best Practices: Naming, Values Design, GitOps Integration
Comprehensive Helm chart design best practices. Covers naming conventions and label standards (app.kubernetes.io/), values design strategies, multi-environment management, subcharts vs umbrella charts, GitOps integration
2026-03-20 · 2 min read #helm#kubernetes#open-source-internals