Nick Nikolakakis

--------------------------

role: Principal SRE, Platform & AI Engineer
focus: Kubernetes · CNCF · Platform · AI
building: AI agents · LLMOps · MCP
shell: zsh
since: 2011

// The SRE Diary: Chronicles of Cloud, Kubernetes and AI

cat latest ./whoami git clone

$ ls -la ~/posts 48 entries

~/posts/choragos-multi-agent-orchestrator 26 min · 5350 words

$ Choragos - Running a Team of Coding Agents Without Losing Control

// Choragos runs a team of AI coding agents with a real division of labour: an orchestrator that plans and delegates, workers with their own context, model and credentials, and a delegate/work-done protocol carrying work between them. A walkthrough of v0.11.2 with config recipes for real teams.

~/posts/shipping-an-obsidian-plugin-with-a-coding-agent 9 min · 1825 words

$ Pinax - Shipping a Production-Grade Obsidian Plugin with a Coding Agent

// How I built and shipped Pinax, an LLM-buildable dashboard framework for Obsidian, using Claude Code: the guardrails that made agentic development work, the automated review battles, and why machine-checkable success criteria beat vibe coding.

~/posts/introducing-sphragis-eu-ai-act-compliance-gateway 17 min · 3410 words

$ Sphragis - The EU AI Act Compliance Gateway You Actually Control

// Sphragis is a self-hosted Go gateway that strips PII out of every LLM request and response before it leaves your network and writes a tamper-evident, hash-chained audit log. A walkthrough of the v0.3.0 release: local redaction, reversible tokenization, multi-provider routing, and OpenTimestamps anchoring.

~/posts/kubernetes-agent-with-google-adk-go 12 min · 2453 words

$ Building a Read-Only Kubernetes Agent with Google ADK (Go)

// How to build a safe, read-only Kubernetes operations assistant in Go using Google's Agent Development Kit, packaged in a scratch image and deployed via Helm with External Secrets Operator.

~/posts/kserve 20 min · 4183 words

$ KServe - Production ML Serving on Kubernetes, from sklearn to LLMs

// How to use KServe v0.18 in Serverless mode to serve both classical ML models and LLMs on Kubernetes - with scale-to-zero, OpenAI-compatible APIs, Flux GitOps, and a real demo on Apple Silicon.

~/posts/dapr 20 min · 4245 words

$ Dapr - Building a Safe Platform for Citizen Developer Apps on Kubernetes

// How to use Dapr, Flux, Harbor, and a shared Helm chart to safely host apps built by non-technical citizen developers using LLMs on Kubernetes.

~/posts/oauth2-proxy 21 min · 4283 words

$ OAuth2-Proxy - Securing MCP Servers on Kubernetes Before Hackers Find Them First

// MCP servers like DBHub expose databases, filesystems, and code execution over HTTP with zero authentication. Learn how to deploy OAuth2-Proxy on Kubernetes to add SSO, group-based access control, and session management to any MCP server without changing a single line of code.

~/posts/knative 15 min · 3111 words

$ Knative - The Platform Engineer's Guide to Serverless on Kubernetes

// A guide to Knative for SREs and Platform Engineers. Learn how Knative Serving, Eventing, and Functions bring serverless capabilities to any Kubernetes cluster with autoscaling, scale-to-zero, and event-driven architectures.

~/posts/pdb-management-operator 13 min · 2756 words

$ PDB Management Operator - Intelligent Pod Disruption Budget Automation for Kubernetes

// Learn how to automate Pod Disruption Budget management in Kubernetes using the PDB Management Operator. This guide explores the operator's architecture, dual configuration model, enforcement modes, and demonstrates how to use it for enterprise-grade availability management in ODA Canvas environments.

~/posts/kratix 13 min · 2744 words

$ Kratix - Building Self-Service Platform Capabilities for Kubernetes

// Learn how to use Kratix to build self-service platform capabilities for SREs and Platform Engineers. This guide explores Kratix's architecture, the Kratix CLI, pros and cons, and walks through a practical example building an on-demand Datadog stack.