https://www.robertasoliman.com/en/blog RSD Consulting en https://www.robertasoliman.com/en/blog/agent-substrate-gvisor-openrl-cncf-governanca https://www.robertasoliman.com/en/blog/agent-substrate-gvisor-openrl-cncf-governanca Fri, 06 Nov 2026 12:00:00 GMT What the Agent Substrate, gVisor and OpenRL donation to CNCF means for agent platform governance, portability, security and production adoption. https://www.robertasoliman.com/en/blog/agent-substrate-gvisor-openrl-arquitetura https://www.robertasoliman.com/en/blog/agent-substrate-gvisor-openrl-arquitetura Thu, 05 Nov 2026 12:00:00 GMT Explore how Agent Substrate, gVisor, and OpenRL fit together through execution contracts, trusted evaluation, security, and Kubernetes operations. https://www.robertasoliman.com/en/blog/openkruise-agents-sandboxes-kubernetes https://www.robertasoliman.com/en/blog/openkruise-agents-sandboxes-kubernetes Thu, 05 Nov 2026 12:00:00 GMT Explore OpenKruise Agents, SandboxSet, SandboxClaim and warm pools, with Kubernetes examples and production guidance on security, observability and reliability. https://www.robertasoliman.com/en/blog/avaliar-isolamento-agentes-ia-kubernetes https://www.robertasoliman.com/en/blog/avaliar-isolamento-agentes-ia-kubernetes Wed, 04 Nov 2026 12:00:00 GMT Evaluate AI agent isolation on Kubernetes through runtime, identity, network, data and resource tests, with independent evidence and release criteria. https://www.robertasoliman.com/en/blog/llmjacking-credenciais-custos-llms https://www.robertasoliman.com/en/blog/llmjacking-credenciais-custos-llms Mon, 02 Nov 2026 12:00:00 GMT Understand LLMJacking and protect LLM spending with IAM, EKS workload identity, financial admission controls, observability, and incident response. https://www.robertasoliman.com/en/blog/proxy-ia-politicas-redacao-dados-sensiveis https://www.robertasoliman.com/en/blog/proxy-ia-politicas-redacao-dados-sensiveis Sun, 01 Nov 2026 12:00:00 GMT Evaluate AI proxies with policy enforcement, sensitive data redaction, streaming tests, tenant isolation, observability, and safe Kubernetes operations. https://www.robertasoliman.com/en/blog/linux-opentelemetry-ebpf-instrumentation https://www.robertasoliman.com/en/blog/linux-opentelemetry-ebpf-instrumentation Sat, 31 Oct 2026 12:00:00 GMT Instrument Linux services with OpenTelemetry eBPF Instrumentation: an OTLP lab, Kubernetes canary, security controls, troubleshooting, and production operations. https://www.robertasoliman.com/en/blog/kubernetes-rede-sandboxes-agentes-ia https://www.robertasoliman.com/en/blog/kubernetes-rede-sandboxes-agentes-ia Thu, 29 Oct 2026 12:00:00 GMT Plan Kubernetes IP capacity, DNS, connections, and egress for ephemeral AI agent sandboxes, with sizing calculations, isolation guidance, and NetworkPolicy examples. https://www.robertasoliman.com/en/blog/kubernetes-sandboxes-efemeros-agentes-ia https://www.robertasoliman.com/en/blog/kubernetes-sandboxes-efemeros-agentes-ia Thu, 29 Oct 2026 12:00:00 GMT Design ephemeral Kubernetes sandboxes for AI agents with runtime isolation, network controls, bounded Jobs, reliable cleanup, and production observability. https://www.robertasoliman.com/en/blog/ottl-v1-traces-metricas-logs-collector https://www.robertasoliman.com/en/blog/ottl-v1-traces-metricas-logs-collector Wed, 28 Oct 2026 12:00:00 GMT Transform traces, metrics, and logs with OTTL v1 in the OpenTelemetry Collector, with practical YAML, testing, Kubernetes, security, and rollback guidance. https://www.robertasoliman.com/en/blog/kamaji-hami-kubernetes-multi-tenant-gpu https://www.robertasoliman.com/en/blog/kamaji-hami-kubernetes-multi-tenant-gpu Sun, 25 Oct 2026 12:00:00 GMT Build a Kamaji and HAMi lab to validate multi-tenant Kubernetes, GPU sharing, isolation, quotas, performance, and failure recovery before production. https://www.robertasoliman.com/en/blog/kyverno-1-19-2-upgrade-clusters https://www.robertasoliman.com/en/blog/kyverno-1-19-2-upgrade-clusters Sat, 24 Oct 2026 12:00:00 GMT Plan a Kyverno v1.19.2 upgrade with security review, Kubernetes compatibility checks, CRD ownership, policy tests, Helm deployment and controlled rollback. https://www.robertasoliman.com/en/blog/llm-d-1-0-lab-kubernetes-agentes https://www.robertasoliman.com/en/blog/llm-d-1-0-lab-kubernetes-agentes Thu, 22 Oct 2026 12:00:00 GMT Build an llm-d 1.0 Kubernetes lab and evaluate routing, KV caching, availability, security, and cost before running agent workloads in production. https://www.robertasoliman.com/en/blog/graviton-vs-x86-eks-quando-migrar https://www.robertasoliman.com/en/blog/graviton-vs-x86-eks-quando-migrar Tue, 20 Oct 2026 12:00:00 GMT How to decide between Graviton (arm64) and x86 instances on EKS: the savings AWS advertises, what usually blocks the move, how to run a canary with Karpenter, and how to measure the real gain per request. https://www.robertasoliman.com/en/blog/savings-plans-vs-reserved-instances-eks https://www.robertasoliman.com/en/blog/savings-plans-vs-reserved-instances-eks Tue, 20 Oct 2026 12:00:00 GMT The practical differences between Compute Savings Plans, EC2 Instance Savings Plans and Reserved Instances (Standard and Convertible), when each fits with Karpenter and Spot, and the mistakes that leave commitment unused. https://www.robertasoliman.com/en/blog/torchtpu-pytorch-tpu-migracao https://www.robertasoliman.com/en/blog/torchtpu-pytorch-tpu-migracao Tue, 20 Oct 2026 12:00:00 GMT Explore TorchTPU, its differences from PyTorch/XLA and CUDA, and how to assess compatibility, performance, cost, and Kubernetes operations. https://www.robertasoliman.com/en/blog/eks-hidden-costs-nat-gateway-cross-az-ebs https://www.robertasoliman.com/en/blog/eks-hidden-costs-nat-gateway-cross-az-ebs Mon, 19 Oct 2026 12:00:00 GMT Where the items that most surprise people on an EKS bill come from, how to find each one in Cost Explorer and what to fix first: S3 and ECR endpoints, topology-aware routing and volume cleanup. https://www.robertasoliman.com/en/blog/graviton-readiness-which-workloads-run-on-graviton https://www.robertasoliman.com/en/blog/graviton-readiness-which-workloads-run-on-graviton Mon, 19 Oct 2026 12:00:00 GMT graviton-readiness reads manifests and the images in the registry and tells which Kubernetes workloads can run on Graviton (arm64) nodes and what blocks the rest. See the rules, the image check and the limits. https://www.robertasoliman.com/en/blog/karpenter-vs-cluster-autoscaler-which-to-use https://www.robertasoliman.com/en/blog/karpenter-vs-cluster-autoscaler-which-to-use Mon, 19 Oct 2026 12:00:00 GMT How each node autoscaler decides, where they differ on Spot, consolidation and governance, when to keep Cluster Autoscaler and a safe path to migrate to Karpenter. https://www.robertasoliman.com/en/blog/mcp-seguranca-exposicao-autenticacao-confianca https://www.robertasoliman.com/en/blog/mcp-seguranca-exposicao-autenticacao-confianca Mon, 19 Oct 2026 12:00:00 GMT Secure MCP servers with exposure controls, OAuth, per-tool authorization, Kubernetes isolation, and practical tests of application trust boundaries. https://www.robertasoliman.com/en/blog/kubernetes-requests-limits-pdb-how-to-read-manifests https://www.robertasoliman.com/en/blog/kubernetes-requests-limits-pdb-how-to-read-manifests Mon, 19 Oct 2026 12:00:00 GMT What each field really does, how requests drive cost and scheduling, why a badly written PDB blocks upgrades or protects nothing, and how to check all of it in your manifests. https://www.robertasoliman.com/en/blog/rightsizing-check-find-inflated-kubernetes-requests https://www.robertasoliman.com/en/blog/rightsizing-check-find-inflated-kubernetes-requests Mon, 19 Oct 2026 12:00:00 GMT rightsizing-check compares the requests in your manifests with observed usage, from files or straight from Prometheus, and tells you what to set instead. See how to get the usage, the rules, the recommendation and the limits. https://www.robertasoliman.com/en/blog/spot-vs-savings-plans-how-to-combine https://www.robertasoliman.com/en/blog/spot-vs-savings-plans-how-to-combine Mon, 19 Oct 2026 12:00:00 GMT What each AWS pricing model covers, why Savings Plans do not apply to Spot, the order to follow (right-size, commit the base, Spot on the elastic part) and the mistakes that leave commitment unused. https://www.robertasoliman.com/en/blog/langgraph-postgresql-retomadas-checkpoints https://www.robertasoliman.com/en/blog/langgraph-postgresql-retomadas-checkpoints Sun, 18 Oct 2026 12:00:00 GMT Test LangGraph recovery after crashes and interrupts, verify idempotency, and manage PostgreSQL checkpoint growth with retention, monitoring, and safe maintenance. https://www.robertasoliman.com/en/blog/google-cloud-llm-d-vllm-nvidia-dynamo https://www.robertasoliman.com/en/blog/google-cloud-llm-d-vllm-nvidia-dynamo Sat, 17 Oct 2026 12:00:00 GMT Explore how vLLM, llm-d, and NVIDIA Dynamo reshape Google Cloud inference with GKE, KV caching, prefill/decode separation, security, reliability, and cost control. https://www.robertasoliman.com/en/blog/gke-wiz-runtime-ebpf-standard-autopilot https://www.robertasoliman.com/en/blog/gke-wiz-runtime-ebpf-standard-autopilot Fri, 16 Oct 2026 12:00:00 GMT Evaluate the managed Wiz Runtime Sensor on GKE Standard and Autopilot: eBPF coverage, deployment, credentials, performance, costs, and rollback. https://www.robertasoliman.com/en/blog/temporal-cloud-run-workers-sob-demanda https://www.robertasoliman.com/en/blog/temporal-cloud-run-workers-sob-demanda Thu, 15 Oct 2026 12:00:00 GMT Design reliable Temporal workers on Cloud Run with Worker Pools, scale-to-zero, retries, security, and practical production deployment criteria. https://www.robertasoliman.com/en/blog/finops-bigquery-quotas-diarias-tokens https://www.robertasoliman.com/en/blog/finops-bigquery-quotas-diarias-tokens Wed, 14 Oct 2026 12:00:00 GMT Configure daily BigQuery token quotas, estimate generative function costs, and build production controls for usage, observability, and failure recovery. https://www.robertasoliman.com/en/blog/aws-lambda-web-functions-hono-latencia-custo https://www.robertasoliman.com/en/blog/aws-lambda-web-functions-hono-latencia-custo Tue, 13 Oct 2026 12:00:00 GMT Deploy a Hono HTTP API on AWS Lambda Web Functions and evaluate concurrency, cold starts, latency, observability, security, rollback and execution costs. https://www.robertasoliman.com/en/blog/spot-readiness-which-workloads-run-on-spot https://www.robertasoliman.com/en/blog/spot-readiness-which-workloads-run-on-spot Tue, 13 Oct 2026 12:00:00 GMT spot-readiness reads manifests or your cluster and tells which Kubernetes workloads tolerate Spot, what to fix first and in what order. See the rules, the plan, the limits and a real case. https://www.robertasoliman.com/en/blog/kagent-laptop-criar-executar-agente https://www.robertasoliman.com/en/blog/kagent-laptop-criar-executar-agente Mon, 12 Oct 2026 12:00:00 GMT Explore kagent on local Kubernetes, create and run an agent, and capture evidence while separating verified documentation from untested execution results. https://www.robertasoliman.com/en/blog/karpenter-1-15-vpa-disrupcao-provisionamento https://www.robertasoliman.com/en/blog/karpenter-1-15-vpa-disrupcao-provisionamento Sat, 10 Oct 2026 12:00:00 GMT Understand the actual state of VPA prediction in Karpenter v1.15.0, disruption metrics, provisioning changes and practical safeguards for production upgrades. https://www.robertasoliman.com/en/blog/agentes-ia-seguranca-evidencias-inferencia-recomendacoes https://www.robertasoliman.com/en/blog/agentes-ia-seguranca-evidencias-inferencia-recomendacoes Fri, 09 Oct 2026 12:00:00 GMT Design AI agents for security operations with traceable evidence, verifiable inference, controlled recommendations, and Kubernetes isolation. https://www.robertasoliman.com/en/blog/argo-cd-3-5-4-seguranca-checklist-upgrade https://www.robertasoliman.com/en/blog/argo-cd-3-5-4-seguranca-checklist-upgrade Thu, 08 Oct 2026 12:00:00 GMT Assess the critical Argo CD v3.5.4 fixes, including the Kustomize remote-reference vulnerability, and plan testing, backup, upgrade, and safe recovery. https://www.robertasoliman.com/en/blog/vulnerability-disclosure-ai-assisted-reports https://www.robertasoliman.com/en/blog/vulnerability-disclosure-ai-assisted-reports Wed, 07 Oct 2026 12:00:00 GMT How to receive, triage and reproduce AI-generated or AI-assisted vulnerability reports: policy, security.txt, report template, an isolated GKE lab with gVisor, observability and costs. https://www.robertasoliman.com/en/blog/eks-1-37-upgrade-checklist-rollback https://www.robertasoliman.com/en/blog/eks-1-37-upgrade-checklist-rollback Sat, 03 Oct 2026 12:00:00 GMT How to upgrade Amazon EKS from 1.36 to 1.37 in production: Upgrade Insights, version skew, backup, bake period, node groups, add-ons, Rollback Readiness and rollback strategies. https://www.robertasoliman.com/en/blog/openclaw-control-plane-kubernetes https://www.robertasoliman.com/en/blog/openclaw-control-plane-kubernetes Fri, 02 Oct 2026 12:00:00 GMT How to install and understand the OpenClaw Control Plane on Kubernetes: reconciliation, Compute Drivers, AgentRevision, Agent isolation, node pools, NetworkPolicy, observability and topologies. https://www.robertasoliman.com/en/blog/gke-agent-sandbox-reinforcement-learning https://www.robertasoliman.com/en/blog/gke-agent-sandbox-reinforcement-learning Thu, 01 Oct 2026 12:00:00 GMT How to build a GKE Agent Sandbox for RL and AI agent workloads: dedicated node pools, gVisor, taints and tolerations, Gymnasium, OpenTelemetry observability and a cold-start comparison. https://www.robertasoliman.com/en/blog/jev-ai-decision-layer-devops-kubernetes https://www.robertasoliman.com/en/blog/jev-ai-decision-layer-devops-kubernetes Sun, 27 Sep 2026 12:00:00 GMT How TypeSafe AI's System One model can classify pipeline failures, triage Kubernetes incidents and cut AI costs by deciding instead of generating text. https://www.robertasoliman.com/en/blog/ai-agent-incident-triage-reduce-mttr https://www.robertasoliman.com/en/blog/ai-agent-incident-triage-reduce-mttr Wed, 23 Sep 2026 12:00:00 GMT How an agent integrated with Slack and Datadog cut initial incident triage from minutes of log analysis down to seconds, saving the team 15h/week. https://www.robertasoliman.com/en/blog/technical-assessment-risks-and-bottlenecks https://www.robertasoliman.com/en/blog/technical-assessment-risks-and-bottlenecks Wed, 23 Sep 2026 12:00:00 GMT A practical technical assessment methodology for infrastructure, backend and operations — what to review, how to prioritize, and what to deliver at the end. https://www.robertasoliman.com/en/blog/karpenter-reduce-kubernetes-costs https://www.robertasoliman.com/en/blog/karpenter-reduce-kubernetes-costs Wed, 23 Sep 2026 12:00:00 GMT How Karpenter provisions nodes based on real pod demand, with sample NodePool and EC2NodeClass, Spot, consolidation, troubleshooting and a production checklist. https://www.robertasoliman.com/en/blog/refactoring-microservices-4x-throughput https://www.robertasoliman.com/en/blog/refactoring-microservices-4x-throughput Wed, 23 Sep 2026 12:00:00 GMT The playbook used to diagnose concurrency bottlenecks and inefficient queries, cutting an API's average latency from 1.2s to 180ms without changing infrastructure.