# Hrittik Roy

Building Communities. Driving Product Growth.

I help engineering teams and open source communities get more out of your product through demos, documentation, talks, and deep dives into **AI Infrastructure**, **developer workflows**, and **platform engineering**. The goal is always the same: **take something complex and make it click.**

I write, speak, and build in this space.

## Navigation

- About: https://hrittikhere.com/about
- Blog: https://hrittikhere.com/posts
- Talks: https://hrittikhere.com/talks
- Bookshelf: https://hrittikhere.com/bookshelf
- Research Papers: https://hrittikhere.com/papers
- Find Me (current city and timezone): https://hrittikhere.com/findmy

## Featured Writing

## [Build a Secure MCP Server with Keycloak, Go, and RFC 8693 Token Exchange](https://hrittikhere.com/posts/build-secure-mcp-server-keycloak-rfc8693)
- Published: Jul 5, 2026
- Category: MCP
- Tags: mcp, keycloak, oauth2, token-exchange, go, security, rfc8693
- Summary: Learn to implement token tiering in MCP servers using RFC 8693 token exchange with Keycloak, separating read and write permissions with audience-bound, short-lived tokens.

## [Stop Re-downloading Your Models: A Practical Guide to Model Caching on Kubernetes with GKE](https://hrittikhere.com/posts/model-caching-kubernetes-gke)
- Published: July 04, 2026
- Category: Kubernetes
- Tags: Kubernetes, GKE, vLLM, LLM Inference, Model Caching, Hugging Face, AI Infrastructure
- Summary: Download a large LLM once, mount it everywhere. A practical guide to caching Hugging Face models on Kubernetes with a PVC, a download Job, and vLLM on GKE.

## [Sandboxing Claude and MCP: a dive into Docker sbx](https://hrittikhere.com/posts/sandbox-claude-code-mcp-docker-sbx)
- Published: Jul 1, 2026
- Category: Security
- Tags: Docker, Security, AI Agents, MCP, Claude Code
- Summary: A hands-on walkthrough of Docker Sandboxes (sbx): boot Claude Code in Locked Down mode, watch outbound requests get blocked, and allow domains one at a time until governance actually works.

## [Everyone Wants Sovereign. Almost Nobody Agrees on What That Means](https://hrittikhere.com/posts/sovereign-cloud-what-it-means)
- Published: 2026-05-26
- Category: Kubernetes
- Tags: Kubernetes, Platform Engineering, Compliance, Cloud Security, Tenant Isolation
- Summary: Sovereign cloud is the most overloaded term in 2026 procurement. Four distinct claims hide under that one word, and the gap between them is where audits go sideways.

## [DevRel Activation Isn't Awareness Anymore: A better PLG Approach](https://hrittikhere.com/posts/devrel-activation-framework)
- Published: April 01, 2026
- Category: Developer Relations
- Tags: DevRel, Product-Led Growth, Community-Led Growth, Activation, Developer Experience, PLG
- Summary: In a Product-Led Growth (PLG) world, DevRel isn't just about awareness anymore. It's about getting developers started, helping them adopt the product, and keeping them engaged.

## [A New Foundation for Multi-Tenancy: Introducing vCluster Standalone](https://www.vcluster.com/blog/vcluster-standalone-multi-tenancy-kubernetes)
- Published: 2025-10-01
- Category: Kubernetes
- Tags: Kubernetes, vCluster, Multi-Tenancy, Platform Engineering, Bare Metal
- Summary: vCluster Standalone (v0.29) eliminates the need for external host clusters by enabling direct Kubernetes deployment on bare metal or VMs, consolidating infrastructure under a single vendor.

## [Scaling Kubernetes Without the Pain of etcd Sharding](https://www.vcluster.com/blog/kubernetes-etcd-sharding-vs-virtual-clusters)
- Published: 2025-08-02
- Category: Kubernetes
- Tags: Kubernetes, vCluster, etcd, Platform Engineering, Multi-Tenancy
- Summary: Virtual clusters using vCluster offer a superior alternative to traditional etcd sharding, providing isolated control planes that eliminate noisy neighbor effects while maintaining shared infrastructure efficiency.

## [How to SSH into a Docker container](https://tailscale.com/learn/ssh-into-docker-container/)
- Published: 2024-08-01
- Category: Networking
- Summary: Secure SSH access to Docker containers using Tailscale (Tailscale).

## [Signing container images: Comparing Sigstore, Notary, and Docker Content Trust](https://snyk.io/blog/signing-container-images/)
- Published: 2023-09-26
- Category: Security
- Tags: Security, Container Security, Kubernetes, DevOps, Supply Chain
- Summary: A comparison of Sigstore, Notary, and Docker Content Trust for signing container images to ensure supply chain integrity.

## [How to Increase Your Luck Surface Area](https://hrittikhere.com/posts/luck-surface-area)
- Published: Feb 08, 2021
- Category: Life
- Tags: Luck Surface Area, Career Growth, Freelancing, Personal Development, Doing and Telling, Content Creation
- Summary: Luck Surface Area is the amount of unexpected opportunities you experience. Learn how Doing real work and Telling others about it can multiply your career opportunities.

## Agent Resources

- Agent metadata: https://hrittikhere.com/.well-known/agent-metadata.json
- LLM guidance: https://hrittikhere.com/llms.txt
- Sitemap: https://hrittikhere.com/sitemap.xml
- RSS: https://hrittikhere.com/rss.xml