AUTHOR
Sabbir Ahmed
Founder, CloudGuys
Sabbir Ahmed is the founder of CloudGuys. He works on microservices architecture and secure Kubernetes deployments, and builds the products CloudGuys ships: WalletD, Tollgate, Tele, Berth and nomus. He writes the posts on this blog.
github.com/by-sabbir · [email protected]
Posts
- Muting Every App on macOS with Core Audio Process Taps ·
- Embed Video Calls in Your App: Sign a Token, Redeem an Invite, Join ·
- Double-Entry Ledger Design for Wallets: Seven Invariants and How We Verify Them ·
- Kubernetes Dashboard Alternatives Compared (2026): Access, Control, AI and Cost ·
- Kubernetes Dashboard Is Archived: What to Use Instead in 2026 ·
- Migrate Off the Kubernetes Dashboard: A Step-by-Step Guide ·
- 43 seconds to 8: what one trace of an AI analyst agent showed us ·
- Count everything twice: the UNION that would have double counted a travel warehouse ·
- Karpenter vs. Cluster Autoscaler vs. EKS Auto Mode: 2026 Costs and Latency Trade-offs ·
- Six layers, one guarantee: the read-only role under an AI analyst's SQL guard ·
- Fewer tools, better agent? What merging 18 tools into 15 did and did not buy ·
- The eval scoring we got wrong, and what we did about it ·
- Your dbt descriptions are your prompt ·
- How we test an AI SRE: a fake cluster, 17 scenarios, and no vibes ·
- Which local model can investigate a Kubernetes cluster? Qwen3 to Qwen3.5, measured ·
- Where a small local model still fails at SRE work: a taxonomy from 276 runs ·
- Prompt injection in Kubernetes: what happened when events and pod names gave the AI orders ·
- When the agent runs out of tool calls: two small fixes that mattered ·
- We are publishing our AI SRE evaluations: the scenarios, the results, and the mistakes ·
- Fixing the AI SRE tool loop in Berth 0.5.0: 18 tools to 15, forced final answers, and what the numbers showed ·
- 20 ms end to end: real-time audio in an AudioWorklet with zero-import WASM ·
- Honest evaluation: how we measured a music filter, and where it still fails ·
- One Rust engine, four hosts: browser, Android, macOS and Linux ·
- Introducing Berth: A Self-Hosted Kubernetes Dashboard With a Read-Only AI SRE ·
- Install a Kubernetes Dashboard with Helm: Token Auth, Ingress, and TLS ·
- An AI SRE That Cannot Touch Your Cluster: How Berth's Read-Only Agent Works ·
- PostgreSQL Migration Checklist: Cutover, Validation, and Rollback ·
- Canary Deployment With Istio ·
- Real Client IP Behind Istio Ambient Gateway: Secure X-Forwarded-For in Go ·
- Managed DevOps vs. Hiring In-House: The Real 2026 Cost Comparison ·
- Heroku, Render & Vercel Alternatives for Scaling Startups (2026 Cost Guide) ·
- Harden WordPress with Cloudflare Free Plan Using Terraform ·
- CI/CD Guardrails: Preventing Friday Deployments ·
- GitOps Best Practices: ArgoCD vs Flux in Production ·
- Infrastructure as Code: 5 Best Practices for Scale ·
- Run Ansible Playbook From Terraform: Provision and Configure EC2 in AWS ·
- Terraform State Management: Kill Local State ·