Nick Nikolakakis

--------------------------

role: Principal SRE, Platform & AI Engineer
focus: Kubernetes · CNCF · Platform · AI
building: AI agents · LLMOps · MCP
shell: zsh
since: 2011

// The SRE Diary: Chronicles of Cloud, Kubernetes and AI

cat latest ./whoami git clone

$ ls -la ~/posts 50 entries

~/posts/agent-sandbox 19 min · 3912 words

$ Agent Sandbox - Kubernetes-Native Sandboxes for AI Agent Code Execution

// A hands-on tour of agent-sandbox, the Kubernetes SIG Apps project for isolated, stateful, singleton workloads built for AI agent runtimes. Includes a Go agent with sandboxed tools on Kind, warm pools claiming in 53ms, Flux GitOps, and the gotchas the docs don't mention.

~/posts/llm-d-distributed-inference 21 min · 4271 words

$ llm-d - Kubernetes-Native Distributed LLM Inference at Scale

// A hands-on tour of llm-d, the CNCF Sandbox framework for distributed LLM inference on Kubernetes - inference-aware routing, prefill/decode disaggregation, and KV-cache offload. Includes a GPU-free demo on Kind using the vLLM simulator, wired with Flux GitOps.

~/posts/choragos-multi-agent-orchestrator 26 min · 5350 words

$ Choragos - Running a Team of Coding Agents Without Losing Control

// Choragos runs a team of AI coding agents with a real division of labour: an orchestrator that plans and delegates, workers with their own context, model and credentials, and a delegate/work-done protocol carrying work between them. A walkthrough of v0.11.2 with config recipes for real teams.

~/posts/shipping-an-obsidian-plugin-with-a-coding-agent 9 min · 1825 words

$ Pinax - Shipping a Production-Grade Obsidian Plugin with a Coding Agent

// How I built and shipped Pinax, an LLM-buildable dashboard framework for Obsidian, using Claude Code: the guardrails that made agentic development work, the automated review battles, and why machine-checkable success criteria beat vibe coding.

~/posts/introducing-sphragis-eu-ai-act-compliance-gateway 17 min · 3410 words

$ Sphragis - The EU AI Act Compliance Gateway You Actually Control

// Sphragis is a self-hosted Go gateway that strips PII out of every LLM request and response before it leaves your network and writes a tamper-evident, hash-chained audit log. A walkthrough of the v0.3.0 release: local redaction, reversible tokenization, multi-provider routing, and OpenTimestamps anchoring.

~/posts/kubernetes-agent-with-google-adk-go 12 min · 2453 words

$ Building a Read-Only Kubernetes Agent with Google ADK (Go)

// How to build a safe, read-only Kubernetes operations assistant in Go using Google's Agent Development Kit, packaged in a scratch image and deployed via Helm with External Secrets Operator.

~/posts/kserve 20 min · 4183 words

$ KServe - Production ML Serving on Kubernetes, from sklearn to LLMs

// How to use KServe v0.18 in Serverless mode to serve both classical ML models and LLMs on Kubernetes - with scale-to-zero, OpenAI-compatible APIs, Flux GitOps, and a real demo on Apple Silicon.

~/posts/dapr 20 min · 4245 words

$ Dapr - Building a Safe Platform for Citizen Developer Apps on Kubernetes

// How to use Dapr, Flux, Harbor, and a shared Helm chart to safely host apps built by non-technical citizen developers using LLMs on Kubernetes.

~/posts/oauth2-proxy 21 min · 4283 words

$ OAuth2-Proxy - Securing MCP Servers on Kubernetes Before Hackers Find Them First

// MCP servers like DBHub expose databases, filesystems, and code execution over HTTP with zero authentication. Learn how to deploy OAuth2-Proxy on Kubernetes to add SSO, group-based access control, and session management to any MCP server without changing a single line of code.

~/posts/knative 15 min · 3111 words

$ Knative - The Platform Engineer's Guide to Serverless on Kubernetes

// A guide to Knative for SREs and Platform Engineers. Learn how Knative Serving, Eventing, and Functions bring serverless capabilities to any Kubernetes cluster with autoscaling, scale-to-zero, and event-driven architectures.