Recent content on Adrian Todorov
Presentation delivered at the Southern California Linux Expo (SCALE), 23rd Edition in March 2026. Multi-tenant Kubernetes with GPU sharing is a compelling model for AI infrastructure, but it requires careful design to balance performance with security. This session shows how to build a secure and scalable environment where multiple teams can run GPU workloads without compromising isolation or…
Description A presentation delivered at the December 2024 Paris HashiCorp User Group , covering Nomad Workload Identity and how it can be used to securely introduce identities (for auth to third parties) and secrets to applications running in Nomad. Using GCP Workload Identity Federation and offline trust between GCP IAM and Nomad’s Workload Identity, all based on OIDC/JWT. Links GitHub…
Introduction Recently I’ve been tinkering around with my Home Assistant setup, more specifically adding voice control. I wanted to enhance it with a local LLM (large language model) to be able to do more advanced natural language processing (I’m in a multilingual household, and Home Assistant’s voice control is pretty static - you have to predefine phrases and actions, you…
Description A presentation delivered at the December 2024 Paris HashiCorp User Group , covering Nomad Workload Identity and how it can be used to securely introduce identities (for auth to third parties) and secrets to applications running in Nomad. Using GCP Workload Identity Federation and offline trust between GCP IAM and Nomad’s Workload Identity, all based on OIDC/JWT. Links GitHub…
Introduction Why a multi-gig home network? What is a multi-gig network anyway? The second question is easy, it’s a network that runs at a speed higher than 1Gbps (usually one of or a combination of 2.5/5/10Gbps), which until a few years ago was almost exclusively reserved for the enterprise space due to hardware costs. But it isn’t anymore, there are quite a few relatively affordable…
Introduction (if you know why you’re here, jump to the next section) VLANs (virtual local area networks) are virtual networks that allow you to segment a single physical network into multiple logical ones. It’s a great way to isolate devices from each other and keep your network a bit more secure, especially with IoT/smart devices (as the famous saying goes, the s in IoT stands for…
Introduction When running a task orchestrator like Nomad or Kubernetes, there’s usually a bunch of different instances ( containers, micro-VMs, jails, etc. ) running, more or less ephemerally, across a fleet of servers. By default all logs would be local to the nodes actually running the stuff we want to run, making it burdensome to debug, correlate events, alert, etc., especially if the…
Introduction Traefik is a great load balancer, which uses dynamic configuration from a variety of providers, notably in this case Consul Catalog , which Nomad jobs can register into, providing a fast and easy way of having automatic virtual hosts and load balancing (ingress) for all of our Nomad jobs. There’s already a decent basic tutorial on Hashicorp Learn about doing just that, so…
Note: Since it came up last time, I’m not in any way affiliated with any of the entities discussed in this article What is Web Monetization Web Monetization is a browser API that allows content creators to monetize content, and content consumers to pay for it, anonymously, without ads or any friction, like paywalls and subscriptions. The basic concept is that a content creator signals…
Pre-introduction Recently I stumbled upon and then stumbled upon again on David Anderson ’s interesting post about “new Kubernetes”, based on a discussion he had with Vallery Lancey about what they would do differently if they were rewriting Kubernetes from scratch. Interestingly, a decent part of the proposals for a “new Kubernetes” are design choices made by…
This article was updated: 15/06 to add an SLA & Support section (thanks T from the DevOps’ish Telegram group for the great idea); add the just released option to deploy Traefik v2 with Kapsule; explicitly mention that instance pricing is hourly 19/06 to update Kapsule’s latest available version (v1.18.4, less than 22 hours after public release!) 21/07 to mention Scaleway’s price…
Introduction Scaleway is a French cloud provider that mostly specialises in (custom designed) bare metal ARM servers, standard VPSes, and has recently started adding some additional services like x86 bare metal servers, Load Balancers, a new and improved object storage, managed databases, container registry, managed firewalls, and, hotly anticipated, a managed Kubernetes Service, Kapsule .…
Let me preface this by saying that i really like HashiCorp, their products and their open core business model. Their Enterprise stack is great with awesome features (Vault selective intercluster replication, Terraform team collaboration tooling, Sentinel Policy as Code, etc.), but if itss for personal use or a small business case that doesn’t require all Terraform Enterpirse Features and…
Preface Hello there. After years of hesitation, i finally got the courage to start my blog as an excuse to play with some cool tech i don’t have the chance to do at work. Of course, there is no fun in using something easy like WordPress, so i chose Hugo , a static site generator. This way i can have everything in Git, and have a CI/CD pipeline that deploys it somewhere. The stack I’ve…
Hi, my name is Adrian Todorov and this is my personal blog. Currently I’m a Staff Solutions Architect at HashiCorp, giving advice on Nomad, Vault, Consul, and everything they interact with. I started my career in tech as a web developer, and afterwards I moved to Site Reliability Engineering, focusing more on various types of infrastructure, their automation and monitoring. I spent a few…
Tracee Debugging Scratch containers