Shivam Kumar https://www.kshivam.com Platform and SRE engineer. The 3 AM Brew: incident notes and design write-ups on Kubernetes, autoscaling, storage and AWS. en <![CDATA[Bounding an Agent’s Authority During Kubernetes Incident Response]]> https://www.kshivam.com/blog/agent-permissions-kubernetes-incident-response https://www.kshivam.com/blog/agent-permissions-kubernetes-incident-response Wed, 14 Oct 2026 08:00:00 GMT Kubernetes Platform Security AI <![CDATA[Shell Access That Expires on its Own: Building Just-in-Time kubectl exec]]> https://www.kshivam.com/blog/jit-kubectl-exec-access https://www.kshivam.com/blog/jit-kubectl-exec-access Fri, 18 Sep 2026 08:40:00 GMT Kubernetes Security AWS Platform <![CDATA[Eight hours for a Ten-Minute Job: EFS Burst Credits, NFS Cache Flags and SQLite]]> https://www.kshivam.com/blog/efs-burst-credits-nfs-cache-sqlite https://www.kshivam.com/blog/efs-burst-credits-nfs-cache-sqlite Tue, 23 Jun 2026 14:05:00 GMT AWS Kubernetes Storage Troubleshooting <![CDATA[79% NXDOMAIN: How ndots:5 Turned One Queue Worker Into a DNS Flood]]> https://www.kshivam.com/blog/kubernetes-ndots-dns-amplification https://www.kshivam.com/blog/kubernetes-ndots-dns-amplification Tue, 14 Apr 2026 09:20:00 GMT Kubernetes DNS Networking AWS Troubleshooting <![CDATA[Admission Controllers In Kubernetes]]> https://www.kshivam.com/blog/introduction-to-admission-controllers-in-kubernetes https://www.kshivam.com/blog/introduction-to-admission-controllers-in-kubernetes Fri, 16 May 2025 07:45:00 GMT Getting Started <![CDATA[Cuncurrent Programming in Python - Async.io]]> https://www.kshivam.com/blog/concurrent-programming-in-python https://www.kshivam.com/blog/concurrent-programming-in-python Thu, 29 Aug 2024 10:20:00 GMT Getting Started <![CDATA[Logs as a Pipeline, Not a Pile: Running Vector on Kubernetes]]> https://www.kshivam.com/blog/vector-kubernetes-logging-pipeline https://www.kshivam.com/blog/vector-kubernetes-logging-pipeline Wed, 08 Nov 2023 09:35:00 GMT Kubernetes Observability Kafka AWS <![CDATA[Six-figure Subject Counts: Why Our Schema Registry Fell Over Every Day]]> https://www.kshivam.com/blog/schema-registry-too-many-subjects https://www.kshivam.com/blog/schema-registry-too-many-subjects Thu, 27 Apr 2023 07:50:00 GMT Kafka Data Troubleshooting <![CDATA[Exactly 100, Not 101: Distributed Rate Limiting with Envoy and Redis]]> https://www.kshivam.com/blog/envoy-global-rate-limiting-redis https://www.kshivam.com/blog/envoy-global-rate-limiting-redis Tue, 06 Dec 2022 10:25:00 GMT Networking Kubernetes Platform AWS <![CDATA[Read-Only File System, But Only on Some Spot Nodes: cloud-init, instance store and fstab]]> https://www.kshivam.com/blog/cloud-init-instance-store-read-only-filesystem https://www.kshivam.com/blog/cloud-init-instance-store-read-only-filesystem Tue, 11 Oct 2022 13:15:00 GMT AWS Storage Troubleshooting <![CDATA[Ten Million Objects a Day: Paying The Small-Files Tax on a Kafka-to-S3 Pipeline]]> https://www.kshivam.com/blog/kafka-s3-small-files-data-lake https://www.kshivam.com/blog/kafka-s3-small-files-data-lake Thu, 22 Jul 2021 11:10:00 GMT AWS Data Storage Kafka