Welcome to my Digital Brain
Navigate · Architecture · Projects · Domains · Sources
I am Rakesh Kadam, a DevSecOps Lead and AI Enthusiast building at the intersection of distributed systems and machine intelligence.
This space is my Digital Brain—a public-facing knowledge base where I synthesize what I consume so it compounds over time. Unlike a traditional blog, this is a living codebase of thought: understanding evolves here, it isn’t just documented.
The architecture follows Andrej Karpathy’s LLM-Wiki pattern—a persistent, agent-maintained artifact where an AI agent handles structure, cross-references, and synthesis as I ingest new information. Some notes will be incomplete; some ideas will change. That’s the point.
Map of Content
How to Navigate
- Browse — Use the sidebar to explore domains and project wikis.
- Search — Press
Cmd + K/Ctrl + Kto find concepts, tools, or commands. - Connect — Hover any link for a preview; open the Graph View to see how ideas intersect.
Knowledge Architecture
How the technical domains in this brain connect and reinforce each other.
| Domain | Role in the Stack | Key Bridges |
|---|---|---|
| Kubernetes & Orchestration | Infrastructure control plane — scheduling, networking, storage, security | CNI → Networking; NetworkPolicies → Zero Trust; PV/PVC → Docker Storage |
| Containers & Runtime | Application packaging, execution, and storage primitives | Layered images → K8s Pod lifecycle; named volumes → K8s StorageClasses |
| Security & DevSecOps | Defense-in-depth across code, runtime, and infrastructure | TLS → K8s control-plane PKI; RBAC → K8s AuthN/AuthZ; Container Security → Docker hardening |
| Networking & DNS | Service discovery, traffic routing, and cluster communication | DNS fundamentals → CoreDNS; CNI plugins → K8s NetworkPolicies; Ingress → TLS termination |
| Observability & Platform | Telemetry, logging, metrics, and product analytics | Grafana Alloy → Internal Observability Platform; Prometheus → K8s Metrics Server |
| AI & LLM Engineering | Agentic workflows, LLM infrastructure, and AI-augmented SDLC | MCP servers → Dev Tooling; RAG → Context Engineering; Agent Memory → Agentic Workflows |
| System Design & Architecture | Patterns for scalable, reliable distributed systems | API patterns → K8s Ingress/Services; CAP theorem → Disaster Recovery; Webhooks → GitOps Security |
| Blockchain & Web3 | Decentralized infrastructure, smart contracts, node operations | Container networking → Web3 node networking; Traefik → Web3 routing |
Learning Trackers — Course progress, certifications, and milestones.
Project Wiki
Synthesized knowledge from real-world production work.
| Project | Stack | Key Notes |
|---|---|---|
| Web3 Infrastructure | Docker · Traefik · NestJS | Networking, Routing, Observability, DR |
| Internal Observability | Teleport · Loki · Grafana Alloy | Scalable Logging, Identity & Access |
| Digital Brain | Quartz · Cloudflare · AI Ingest | Zero-Trust Gating |
| Side Projects | CLI · Draw · Todo · Games | Vibecoded & self-hosted |
Technical Domains
Curated concepts, patterns, and references by technology.
Kubernetes & Orchestration
Comprehensive reference covering cluster architecture, workloads, networking, storage, security, and troubleshooting.
| Page | Description |
|---|---|
| CKA Practice Tasks | Hands-on drill index for every CKA exam topic |
| Index | Cluster architecture, workloads, networking, storage |
| CKA Certification | Exam structure, domains, and prep strategy |
| CKA Study Roadmap | Learning plan and daily schedule |
| Why Kubernetes? | Problems K8s solves and when NOT to use it |
| Kubernetes Architecture | Control Plane, Worker Nodes, component deep-dive |
| Kind Cluster Setup | Local multi-node K8s cluster with Kind |
| Pod Fundamentals | Pods, imperative vs declarative, YAML basics |
| Multi-Container Pods | Sidecar, init, adapter, ambassador patterns |
| Init Containers | Pre-start setup, validation, and migration |
| Sidecar Pattern | Auxiliary containers for logging, monitoring, proxying |
| Kubernetes Environment Variables | ConfigMap, Secret, Downward API injection |
| Pod Commands and Arguments | Overriding ENTRYPOINT and CMD |
| Deployment, ReplicaSet & Replication Controller | Self-healing, scaling, rolling updates, rollback |
| Kubernetes Services | ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints |
| Kubernetes Service Types | Detailed comparison and YAML patterns for each type |
| Kubernetes Namespaces | Logical isolation, multi-tenancy, resource quotas, and default namespaces |
| Kubernetes Storage | PVs, PVCs, StorageClasses, access modes, reclaim policies, emptyDir, and hostPath |
| Kubernetes DaemonSet | Node-level workload: one Pod per node for agents, monitoring, CNI |
| Kubernetes Jobs | Batch execution: finite tasks with completions, parallelism, and retries |
| Kubernetes CronJobs | Scheduled batch: cron-based Job creation with concurrency and history controls |
| Kubernetes Static Pods | Node-level control plane bootstrapping: kubelet-managed Pods without API server involvement |
| Kubernetes Labels and Selectors | Metadata and query system: the glue between Services, controllers, and Pods |
| Kubernetes Manual Scheduling | nodeName, nodeSelector, and taints/tolerations for bypassing or constraining the scheduler |
| Kubernetes Taints and Tolerations | Node taints and Pod tolerations: effects, built-in taints, and dedicated node pools |
| Kubernetes Node Affinity | Advanced positive scheduling: rich operators, soft/hard constraints, and the taints+affinity production pattern |
| Kubernetes Resource Requests and Limits | CPU/memory requests, limits, Metrics Server, OOMKilled, and Pending resource failures |
| Kubernetes Autoscaling | HPA, VPA, Cluster Autoscaler, Node Auto-Provisioning: scaling mechanisms at Pod and cluster level |
| Horizontal Pod Autoscaler (HPA) | CPU/memory-based replica scaling, YAML anatomy, and imperative commands |
| Vertical Pod Autoscaler (VPA) | Resource right-sizing: Off, Initial, and Auto modes |
| Kubernetes Health Probes | Liveness, readiness, and startup probes: mechanisms, parameters, and troubleshooting |
| Kubernetes ConfigMaps and Secrets | ConfigMap and Secret objects: creation, volume mounting, env injection, and security |
| Kubernetes Authentication & Authorization | API server security pipeline: TLS → AuthN → AuthZ → Admission |
| Kubernetes RBAC | Roles, ClusterRoles, Bindings, and the rule anatomy for CKA |
| Kubernetes Kubeconfig | Client credentials, contexts, and cluster switching for kubectl |
| Kubernetes Service Account | In-cluster identity, token lifecycle, RBAC binding, and imagePullSecrets |
| Kubernetes Network Policies | CNI support matrix, default deny patterns, ingress/egress whitelist design |
| Kubeadm Cluster Setup | Production cluster installation with kubeadm: ports, CNI, certificates |
| Kubernetes Cluster Upgrade | Rolling update strategy, kubeadm commands, and worker-node sequencing |
| Node Maintenance | Drain, cordon, uncordon: safe node evacuation and scheduling gates |
| Versioning & Version Skew | Release cadence, support lifecycle, and component compatibility rules |
| ETCD Backup & Restore | Snapshot, restore, certificate paths, and stacked vs external ETCD |
| Disaster Recovery | DR hierarchy, RTO/RPO, persistent data protection, and cluster reconstruction |
| Kubernetes Logging and Monitoring | Container/node/cluster logs, Metrics Server, and kubectl top troubleshooting |
| Kubernetes Application Troubleshooting | Systematic debugging chain, failure catalog, and events-first strategy |
| Kubernetes Control Plane Troubleshooting | kube-apiserver, etcd, scheduler, controller-manager failure diagnosis |
| Kubernetes Worker Node Troubleshooting | kubelet, container runtime, CNI, kube-proxy, resource pressure eviction |
| CoreDNS | Kubernetes cluster DNS and service discovery |
| Kubernetes CNI | Container Network Interface plugins and cluster networking |
| Kubernetes Ingress | Layer 7 HTTP/HTTPS routing, Ingress Controllers, path types, TLS termination |
| Helm | Kubernetes package manager: charts, repositories, releases, and templating |
| Helm Charts | Chart anatomy, Go templates, values design, and dependency management |
| Helm Release Management | Install, upgrade, rollback, and revision history |
AI & LLMs
The largest and fastest-moving domain. See the AI & LLMs Index for full subtopic breakdown.
| Page | Description |
|---|---|
| Index | Claude Code, agentic workflows, infrastructure, and research |
Docker & Containers
Prerequisite domain for Kubernetes and production containerization.
| Page | Description |
|---|---|
| Index | Compose, networking, security, and best practices |
| Docker Fundamentals | Containers, images, and the Docker workflow |
| Dockerize a Project | Writing Dockerfiles, building images, running containers |
| Run vs Attach vs Exec | Container lifecycle commands |
| Docker Storage | Layered architecture, storage drivers, volumes, bind mounts, and the Kubernetes storage bridge |
Networking
DNS, service discovery, and traffic routing — essential for Kubernetes and cloud infrastructure.
| Page | Description |
|---|---|
| Index | DNS, load balancing, and routing fundamentals |
| DNS Fundamentals | What DNS is, why it exists, and how it maps names to IPs |
| DNS Record Types | A, CNAME, MX, NS, TXT, SRV — anatomy and use cases |
| DNS Caching | Browser, OS, router, ISP, and resolver-level caching |
| DNS Hierarchy and Root Servers | Root, TLD, and authoritative servers; anycast |
| DNS Resolution Flow | Step-by-step query walkthrough |
| Local DNS Configuration | /etc/hosts, /etc/resolv.conf, and troubleshooting |
| Public DNS Resolvers | Cloudflare 1.1.1.1, Google 8.8.8.8, and when to switch |
Security
| Page | Description |
|---|---|
| Index | DevSecOps, hardening, identity |
| DevSecOps Fundamentals | Security-as-code, defense in depth, pipeline stages |
| Shift Left Security | Early security controls and the cost curve |
| Threat Modeling | STRIDE methodology and OWASP Threat Dragon |
| Container Security | Docker hardening, image scanning, K8s runtime protection |
| SAST, DAST, and SCA | Security testing taxonomy and pipeline gates |
| GitOps Security | Repository hardening, supply chain, secret management |
| Kyverno | Kubernetes-native policy engine: YAML-driven admission control, validate/mutate/generate, audit vs enforce |
| Falco | CNCF-graduated runtime security engine — eBPF syscall monitoring and declarative rules |
| Runtime Security | Detecting threats while workloads execute; the third phase of defense-in-depth |
| CKS Certification | Certified Kubernetes Security Specialist — cluster hardening, supply chain, and Falco scenarios |
| Kubernetes Admission Controllers | Validating/mutating webhooks and the API-server policy gate |
| Zero-Trust Access | Teleport, BeyondCorp patterns |
| AI Security | Securing AI-generated code and pipelines |
| TLS Fundamentals | Certificates, handshake, cipher suites, and PKI |
System Design
| Page | Description |
|---|---|
| Index | Overview of all system-design notes |
| API Communication Patterns | REST, gRPC, GraphQL, WebSockets |
| Client-Server Architecture | Fundamentals and patterns |
| Webhooks | Design, retries, security |
| CAP Theorem | Consistency vs availability trade-offs |
Observability
| Page | Description |
|---|---|
| Index | Prometheus, Loki, Grafana stack |
| Grafana Alloy | Log shipping and telemetry |
| Product Analytics | PostHog, event tracking |
Tooling
| Page | Description |
|---|---|
| Index | Dev tooling overview |
| VS Code Remote SSH | Remote dev workflow |
| PostHog | Product analytics setup |
Blockchain & Web3
| Page | Description |
|---|---|
| Index | Smart contracts, node infrastructure, Web3 patterns |
Programming
| Page | Description |
|---|---|
| Programming Fundamentals | Core concepts and mental models |
| Python Basics | Language fundamentals |
Entities
People and tools I track and reference frequently.
| Entity | Role |
|---|---|
| CampusX | AI/ML education channel (primary Claude Code learning source) |
| Hitesh Choudhary | Developer educator |
| Daniel Miessler | Security & AI thinker, creator of Fabric |
| Exa | AI-native search tool |
| Tech Tutorials with Piyush | Kubernetes & DevOps educator (CKA course source) |
| Saiyam Pathak | Cloud-native educator, CNCF Ambassador, @kubesimplify |
| Abhishek Veeramalla | DevOps educator, Kubernetes instructor, and Helm specialist |
Raw Sources
Original immutable documents ingested into this brain.
| Category | Index |
|---|---|
| Videos | Consumed Videos |
| Tutorials | Other Tutorials · Udemy Gen AI Course |
| Helm | Helm Zero to Hero — Abhishek Veeramalla’s comprehensive Helm tutorial |
| Kubernetes Security | Enforce Kubernetes Security with Kyverno — Cluster governance with Kyverno policies and Argo CD |
| Kubernetes Runtime Security | Falco for Kubernetes Security — CKS Scenarios — Runtime threat detection with Falco: custom rules, host install, and CKS exam patterns |
| Posts & Blogs | Karpathy LLM-Wiki · Agentic DevOps · Securing AI Code |