# Writing

Tutorials, deep-dives, and field notes on Kubernetes, platform engineering, and cloud native.

## [Topology-Aware GPU scheduling with KAI Scheduler](https://hrittikhere.com/posts/kubernetes-topology-aware-scheduling-kai)
- Published: 2026-07-12
- Category: Kubernetes
- Tags: KAI Scheduler, Kubernetes, GPU scheduling, gang scheduling, topology-aware scheduling, distributed training
- Summary: How KAI Scheduler uses topology-aware placement and gang scheduling to keep distributed GPU training inside one region, zone, or rack on Kubernetes.

## [Introducing and a Deep Dive Into Dynamo with vCluster](https://www.vcluster.com/blog/nvidia-dynamo-with-vcluster)
- Published: 2026-07-07
- Category: AI Infrastructure
- Tags: vCluster, GPU, NVIDIA, Kubernetes, Dynamo
- Summary: A deep dive into NVIDIA Dynamo, an open-source inference serving framework that profiles hardware and generates optimized LLM deployment configurations, demonstrated by deploying Qwen3-0.6B on a tenant cluster with vCluster Private Nodes.

## [Build a Secure MCP Server with Keycloak, Go, and RFC 8693 Token Exchange (Part 1)](https://hrittikhere.com/posts/build-secure-mcp-server-keycloak-rfc8693)
- Published: Jul 5, 2026
- Category: MCP
- Tags: mcp, keycloak, oauth2, token-exchange, go, security, rfc8693
- Summary: Learn to implement token tiering in MCP servers using RFC 8693 token exchange with Keycloak, separating read and write permissions with audience-bound, short-lived tokens.

## [Stop Re-downloading Your Models: A Practical Guide to Model Caching on Kubernetes with GKE](https://hrittikhere.com/posts/model-caching-kubernetes-gke)
- Published: July 04, 2026
- Category: Kubernetes
- Tags: Kubernetes, GKE, vLLM, LLM Inference, Model Caching, Hugging Face, AI Infrastructure
- Summary: Download a large LLM once, mount it everywhere. A practical guide to caching Hugging Face models on Kubernetes with a PVC, a download Job, and vLLM on GKE.

## [Sandboxing Claude and MCP: a dive into Docker sbx](https://hrittikhere.com/posts/sandbox-claude-code-mcp-docker-sbx)
- Published: Jul 1, 2026
- Category: Security
- Tags: Docker, Security, AI Agents, MCP, Claude Code
- Summary: A hands-on walkthrough of Docker Sandboxes (sbx): boot Claude Code in Locked Down mode, watch outbound requests get blocked, and allow domains one at a time until governance actually works.

## [From Data Residency to Digital Sovereignty: Architectural Patterns for Cloud Native Platforms](https://www.cncf.io/blog/2026/06/16/from-data-residency-to-digital-sovereignty-architectural-patterns-for-cloud-native-platforms/)
- Published: 2026-06-16
- Category: Platform Engineering
- Tags: Kubernetes, Tenant Clusters, Data Residency, Platform Engineering, Compliance
- Summary: Platform teams can achieve digital sovereignty by implementing tenant clusters, isolated Kubernetes control planes per jurisdiction, rather than relying solely on regional infrastructure.

## [Introducing and a Deep Dive Into AICR with vCluster](https://www.vcluster.com/blog/nvidia-aicr-with-vcluster)
- Published: 2026-06-12
- Category: AI Infrastructure
- Tags: vCluster, GPU, NVIDIA, Kubernetes, AICR
- Summary: A deep dive into NVIDIA AI Cluster Runtime (AICR), which resolves GPU cluster dependencies like a package manager, demonstrated end-to-end on a real A100 node with vCluster.

## [Everyone Wants Sovereign. Almost Nobody Agrees on What That Means](https://hrittikhere.com/posts/sovereign-cloud-what-it-means)
- Published: 2026-05-26
- Category: Kubernetes
- Tags: Kubernetes, Platform Engineering, Compliance, Cloud Security, Tenant Isolation
- Summary: Sovereign cloud is the most overloaded term in 2026 procurement. Four distinct claims hide under that one word, and the gap between them is where audits go sideways.

## [DevRel Activation Isn't Awareness Anymore: A better PLG Approach](https://hrittikhere.com/posts/devrel-activation-framework)
- Published: April 01, 2026
- Category: Developer Relations
- Tags: DevRel, Product-Led Growth, Community-Led Growth, Activation, Developer Experience, PLG
- Summary: In a Product-Led Growth (PLG) world, DevRel isn't just about awareness anymore. It's about getting developers started, helping them adopt the product, and keeping them engaged.

## [How Neoclouds Can Launch a Managed Kubernetes Platform on Bare Metal in 2 Weeks](https://www.vcluster.com/guides/neocloud-managed-kubernetes-bare-metal)
- Published: 2026-03-17
- Category: AI Infrastructure
- Summary: How neocloud providers can skip 12 months of platform engineering and launch production-ready managed Kubernetes in two weeks using vCluster.

## [Beyond CVE Fatigue: Why I’m Going All-In on Docker Hardened Images](https://hrittikhere.com/posts/beyond-cve-fatigue)
- Published: Feb 11, 2026
- Category: DevOps
- Tags: Docker, Security, DevOps, AppSec, Container Security
- Summary: Over 90% of apps rely on open source, making container images a massive attack surface. Discover how Docker Hardened Images (DHI) eliminate vulnerability noise and secure your supply chain.

## [The Growing Demand for Cloud-Like Developer Experience with Bare Metal GPU](https://www.vcluster.com/guides/cloud-like-developer-experience-bare-metal-gpu-guide)
- Published: 2026-01-10
- Category: AI Infrastructure
- Summary: How enterprises can transform bare metal GPU infrastructure into Kubernetes-based platforms that deliver cloud-like developer experiences without vendor lock-in.

## [Scaling Without Limits: The What, Why, and How of Cloud Bursting](https://www.vcluster.com/blog/scaling-without-limits-cloud-bursting-guide)
- Published: 2025-10-29
- Category: Kubernetes
- Tags: Kubernetes, Cloud, vCluster, Multi-Cloud, Platform Engineering
- Summary: How vCluster VPN enables seamless multi-cloud Kubernetes networking, allowing organizations to scale elastically across environments during demand spikes.

## [A New Foundation for Multi-Tenancy: Introducing vCluster Standalone](https://www.vcluster.com/blog/vcluster-standalone-multi-tenancy-kubernetes)
- Published: 2025-10-01
- Category: Kubernetes
- Tags: Kubernetes, vCluster, Multi-Tenancy, Platform Engineering, Bare Metal
- Summary: vCluster Standalone (v0.29) eliminates the need for external host clusters by enabling direct Kubernetes deployment on bare metal or VMs, consolidating infrastructure under a single vendor.

## [Scaling Kubernetes Without the Pain of etcd Sharding](https://www.vcluster.com/blog/kubernetes-etcd-sharding-vs-virtual-clusters)
- Published: 2025-08-02
- Category: Kubernetes
- Tags: Kubernetes, vCluster, etcd, Platform Engineering, Multi-Tenancy
- Summary: Virtual clusters using vCluster offer a superior alternative to traditional etcd sharding, providing isolated control planes that eliminate noisy neighbor effects while maintaining shared infrastructure efficiency.

## [How to Set Up a GPU-Enabled Kubernetes Cluster on GKE: Step-by-Step Guide for AI & ML Workloads](https://www.vcluster.com/blog/gcp-gke-gpu-cluster)
- Published: 2025-06-26
- Category: Kubernetes
- Tags: Kubernetes, GKE, GPU, AI, vCluster, Machine Learning
- Summary: A step-by-step guide to setting up a GPU-enabled Kubernetes cluster on Google Kubernetes Engine for AI and ML workloads, with vCluster for improved GPU resource sharing across teams.

## [How to SSH into a Docker container](https://tailscale.com/learn/ssh-into-docker-container/)
- Published: 2024-08-01
- Category: Networking
- Summary: Secure SSH access to Docker containers using Tailscale (Tailscale).

## [Syncing Ingress Resources with vCluster on GKE: A Step-by-Step Guide](https://www.loft.sh/blog/syncing-ingress-vcluster)
- Published: 2024-07-10
- Category: Kubernetes
- Summary: Hands-on guide to syncing Ingress with vCluster on GKE (Loft).

## [Automating Kubernetes Cleanup in CI Workflows](https://cloudnativenow.com/contributed-content/automating-kubernetes-cleanup-in-ci-workflows/)
- Published: 2024-06-15
- Category: Kubernetes
- Summary: Best practices for automating Kubernetes resource cleanup in CI pipelines (CloudNativeNow).

## [Efficient Kubernetes Cluster Management: Building Infrastructure-Agnostic Clusters with Cluster API](https://www.suse.com/c/rancher_blog/kubernetes-cluster-management-building-infrastructure-agnostic-clusters-with-cluster-api/)
- Published: 2024-01-20
- Category: Kubernetes
- Summary: Using Cluster API to build infrastructure-agnostic Kubernetes clusters (SUSE Rancher).

## [Signing container images: Comparing Sigstore, Notary, and Docker Content Trust](https://snyk.io/blog/signing-container-images/)
- Published: 2023-09-26
- Category: Security
- Tags: Security, Container Security, Kubernetes, DevOps, Supply Chain
- Summary: A comparison of Sigstore, Notary, and Docker Content Trust for signing container images to ensure supply chain integrity.

## [Getting started with monitoring — Traces](https://fiberplane.com/blog/getting-started-with-monitoring-traces)
- Published: 2023-06-01
- Category: Observability
- Summary: Intro to traces in modern monitoring systems (Fiberplane).

## [Profiling Go Code with GoLand](https://blog.jetbrains.com/go/2023/02/02/profiling-go-code-with-goland/)
- Published: 2023-02-02
- Category: Go
- Summary: Profiling Go applications using JetBrains GoLand (JetBrains).

## [How to use Kubernetes events for effective alerting and monitoring](https://grafana.com/blog/2023/01/23/how-to-use-kubernetes-events-for-effective-alerting-and-monitoring/)
- Published: 2023-01-23
- Category: Observability
- Summary: Leverage Kubernetes events for effective alerting and monitoring (Grafana Labs).

## [Understanding Fuzz Testing in Go](https://blog.jetbrains.com/go/2022/12/14/understanding-fuzz-testing-in-go/)
- Published: 2022-12-14
- Category: Go
- Summary: Overview of fuzz testing in Go with practical tips (JetBrains).

## [How to Increase Your Luck Surface Area](https://hrittikhere.com/posts/luck-surface-area)
- Published: Feb 08, 2021
- Category: Life
- Tags: Luck Surface Area, Career Growth, Freelancing, Personal Development, Doing and Telling, Content Creation
- Summary: Luck Surface Area is the amount of unexpected opportunities you experience. Learn how Doing real work and Telling others about it can multiply your career opportunities.