Older posts.
How to Use MLflow 3: Tracking, Model Registry and GenAI Tracing (2026)
Step-by-step MLflow 3.17 guide: run a tracking server on PostgreSQL and S3, log runs and LoggedModels, register models with aliases instead of stages, trace and evaluate a GenAI app with mlflow.genai, serve the champion model, and fix the errors you will actually hit.
12 minOct 20, 2026How to Migrate From ingress-nginx to Gateway API: Step-by-Step (2026)
A tested, step-by-step ingress-nginx to Gateway API migration: inventory annotations, install Gateway API v1.6.3 and Envoy Gateway v1.9.2, convert with ingress2gateway v1.2.0, handle TLS, rewrites and canaries, read route status conditions, cut over with DNS and roll back.
13 minOct 20, 2026MCP Authorization Explained: OAuth 2.1, RFC 9728 and CIMD in 2026
How MCP authorization works in the 2026-07-28 spec: OAuth 2.1 with PKCE, RFC 9728 protected resource metadata, RFC 8707 resource indicators, Client ID Metadata Documents replacing deprecated DCR, the token passthrough ban, and enterprise IdP access through ID-JAG.
12 minOct 20, 2026Running LLMs Locally in 2026: Ollama vs llama.cpp vs LM Studio vs MLX
A practical 2026 guide to running LLMs locally: Ollama 0.40, llama.cpp 0.7, LM Studio 0.4, MLX and vLLM compared, which models fit in 8, 16, 32 and 64GB, how Q4_K_M quantization works, the bandwidth maths behind tokens per second, licences and privacy.
12 minOct 20, 2026AI-Generated Terraform in 2026: Benchmarks, Failure Modes, Guardrails
Can you trust an LLM to write Terraform, Kubernetes YAML or Helm? What IaC-Eval, DPIaC-Eval and three 2025 to 2026 papers measured (19% to 30% first-try success, 8.4% policy compliance), the failure modes they found, and the plan, policy and review gates that make AI-written IaC safe.
12 minOct 20, 2026How to Run LLM Evals in CI with GitHub Actions (promptfoo, 2026)
Step-by-step: gate prompt and model changes with LLM evals in GitHub Actions using promptfoo 0.124 or DeepEval 4.3, with deterministic and LLM-as-judge assertions, pass-rate thresholds, caching, cost limits, PR comments and fixes for flaky evals.
14 minOct 20, 2026LiteLLM Proxy Setup: Docker, Virtual Keys, Budgets (2026)
Set up LiteLLM proxy v1.106 with Docker Compose or Helm: config.yaml, fallbacks, virtual keys with budgets and rate limits, plus fixes for common errors.
13 minOct 20, 2026How to Troubleshoot Linux Performance in 60 Seconds (2026 Checklist)
A step-by-step Linux performance troubleshooting guide for 2026: Brendan Gregg's 60-second checklist (uptime, dmesg, vmstat, mpstat, pidstat, iostat, free, sar, top), how to read each output, PSI, the USE method, then bpftrace 0.27 and BCC one-liners.
13 minOct 20, 2026How to Add Human-in-the-Loop Approval to a LangGraph Agent (2026)
Step-by-step LangGraph 1.2 guide: build a tool-calling agent with interrupt() approval before risky tools, persist it with the Postgres checkpointer, resume with Command, stream updates, deploy, and fix the common errors.
11 minOct 20, 2026How to Enforce Pod Security Standards with Kyverno 1.19 (2026)
Step-by-step: enforce Kubernetes Pod Security Standards with Pod Security Admission namespace labels and Kyverno 1.19 CEL policies. Helm install, audit then enforce, policy reports, mutate and generate policies, PolicyExceptions, and fixes for Kyverno webhook failures.
13 minOct 20, 2026Kubernetes Security in 2026: First Attack in 18 Minutes, and What Stops It
How Kubernetes clusters really get attacked in 2026: anonymous API access and RBAC abuse, cryptomining, exposed dashboards and Helm charts, IngressNightmare, plus Red Hat and Wiz survey numbers, the CIS benchmark, Pod Security Standards, user namespaces GA and image signing.
13 minOct 20, 2026Kubernetes Requests and Limits Explained: 8% CPU Used, Resize GA in 1.35
Kubernetes requests and limits in 2026: how QoS classes and oom_score_adj decide who dies, why CPU limits cause CFS throttling, what cgroup v2 changed for OOM kills, in-place resize GA in 1.35, VPA InPlaceOrRecreate, and why clusters still use 8% of their CPU.
13 minOct 20, 2026Kyverno vs Gatekeeper vs ValidatingAdmissionPolicy in 2026
Kubernetes policy engines compared for 2026: Kyverno 1.19 (CNCF graduated, ClusterPolicy deprecated for CEL), OPA Gatekeeper 3.23 with CEL and generated VAPs, built-in ValidatingAdmissionPolicy (GA 1.30) and MutatingAdmissionPolicy (stable 1.36), latency numbers, and when to use which.
13 minOct 20, 2026How to Fix Kubernetes Pods Stuck in Pending: Causes and Commands (2026)
Pods stuck in Pending? Read the FailedScheduling event, then fix the cause: insufficient cpu or memory, untolerated taints, node affinity, unbound PVCs and volume zones, topology spread, quotas, scheduling gates, or Karpenter and Cluster Autoscaler not scaling.
12 minOct 20, 2026Fix Kubernetes OOMKilled and Exit Code 137: Step-by-Step Guide (2026)
How to fix OOMKilled and exit code 137 in Kubernetes: confirm the kill with lastState, tell a cgroup limit OOM from node OOM and eviction, read working set vs RSS, size JVM, Node.js, Go and Python memory to the limit, find leaks, and right-size with VPA and in-place resize.
12 min