Skip to main content

Posts

AIOps Agents - PoC to Prod - OpenClaw to Kagenti

AI Agents are here and most of us are now used to agents assisting us with several types of tasks. As a result:  New kind of usecases are emerging to improve efficiency, reduce cost, reduce effort on repeating tasks etc  New types software engineering paradigm and architectural pattern are coming up New category terminologies has also surfaced and still getting introduced. One of such new types of uses cases (that also leverages the other new types I listed above) is "Agents for Ops" .  In this post I will explain my journey to creating agents for ops. (I build 2: 1 for K8s and 1 for VMs fleet; but to keep this post short I will focus on the k8s-namespace-monitoring-agent).  It is a description of path I took to build an agent that monitors applications (multiple) deployed on K8s cluster and remediates issues that impacts the applications' functionality. But it does so based on a knowledge base given to it, nothing more and nothing less and that's the purpose -...
Post a Comment
Read more
Recent posts

Managing devices using Edge Manager

Managing edge devices has been a complex process as traditional IT ops tools fall short in distributed, low-connectivity environment to manage huge quantity of devices.  Red Hat Edge Manager  (Open source project: FlightControl , GA'd by Red Hat on late Jan, 2026) solves these challenges by providing streamlined management of edge devices and applications through a declarative approach . Now, there's a fair bit to unpack here. But for simplicity this is how I am going to map those 3 things here: Management of edge devices: I am mapping this to LCM (including upgrade, patch etc) of the underlying OS (in this case RHEL OS of BootC flavor or at least UBI based RHEL ). Managing applications: Mapping this to deploying applications and LCM of the applications stack on the OS. Declarative approach: This one is super interesting. To me this is very K8s-yy but in the world of edge devices running linux (RHEL OS, as of today). And then this thing also has MCP : This is my next prob...
Post a Comment
Read more

Passwordless Auth to Azure Key Vault using External Secret and Workload Identity

I want to fetch my secrets from Azure KV and I don't want to use any password for it. Let's see how this can be implemented. This is yet another blog post (YABP) about ESO and Azure Workload Identity. Why Passwordless Auth: It is a common practice to use some sort of "master password" (spn clienid, clientsecret etc) to access Secret Vaults (in this case it is AZ KV) but that master password becomes a headache to manage (rotate, prevent leak etc). So, the passwordless auth to AKV is ideal.  Why ESO: This is discussed and addressed in the conclusion section. Workload Identity (Passwordless Auth): Lets make a backward start (just for a change). I will try to explain how the passwordless auth will work. This will make more sense when you will read through the detailed implementation section. Here's a sequence diagram to explain it: There's no magic here. This is a well documented process by microsoft  here . The below diagram (directly copied from the official doc...
Post a Comment
Read more