"Cluster API (CAPI): Managing Kubernetes Clusters Like Applications"Kubernetes clusters have become critical infrastructure—and also a recurring operational burden. This book is for experienced platform engineers, SREs, and Kubernetes operators who want to manage clusters with the same disciplined, API-driven workflows they use for applications. Instead of scripts and one-off runbooks, you’ll learn to treat clusters as declarative objects, reconciled continuously by controllers, wi...

"Kueue for Batch and AI Jobs: Queueing, Fairness, and Resource Sharing in Kubernetes"Batch pipelines and AI training don’t fail in Kubernetes because “the scheduler is broken”—they fail because multi-tenant clusters need explicit queueing, clear admission policy, and predictable sharing rules. This book is written for experienced Kubernetes platform engineers, ML infrastructure builders, and SREs who must turn scarce CPU/GPU fleets into reliable, fair, high-throughput systems witho...

"ISO/IEC 42001 for AI: Building an AI Management System Engineers Can Operate"AI governance often fails in one of two ways: it becomes abstract policy no delivery team can execute, or it collapses into scattered technical controls with no management-system discipline behind them. This book is written for experienced engineers, ML platform leaders, security and compliance architects, technical product owners, and internal auditors who need to turn ISO/IEC 42001 into something real, ...

"pgvector for Postgres: Practical Vector Search Without a New Database"Vector search no longer has to mean introducing a separate datastore, duplicating operational effort, and compromising transactional simplicity. This book is written for experienced PostgreSQL practitioners, backend engineers, data infrastructure teams, and technical leaders who want to add modern embedding retrieval directly inside Postgres with rigor rather than hype. It treats pgvector not as a novelty featur...

"in‑toto Attestations: End‑to‑End Supply Chain Integrity for Artifacts"Modern software delivery pipelines are hostile environments, even when your registries, CI, and access controls look “secure.” This book is for experienced security engineers, platform teams, and tool builders who need cryptographically verifiable, artifact-centric integrity—proof that the artifact you deploy is the one you intended, with evidence you can audit, automate, and enforce across organizations and too...

"Qdrant Vector Search: Shipping High‑Recall Retrieval with Filters and Payloads"Modern retrieval systems fail in subtle ways: they look fast in demos, then lose critical results once filters, payloads, tenancy rules, and production latency targets arrive. This book is for experienced search, ML, and backend engineers who need more than a vector database introduction. It treats Qdrant as a retrieval engine, showing how architecture, schema, indexing, and operations combine to determ...

"Stopping LLM Data Exfiltration: DLP Patterns for Prompts, Logs, and Retrieval"Large language models create extraordinary leverage—and equally extraordinary opportunities for sensitive data to escape through prompts, outputs, logs, retrieval pipelines, and agent tools. This book is written for security architects, platform engineers, ML infrastructure leaders, and senior practitioners who need to secure production LLM systems without sacrificing usability or operational speed. It a...

"Verifiable Credentials & DIDs: Wallets, OIDC Flows, SD‑JWT, and Secure Messaging"Verifiable Credentials are moving from lab demos to regulated, adversarial production environments—and the engineering bar is rising accordingly. This book is written for experienced architects and senior developers who need more than vocabulary: a coherent mental model of issuer–holder–verifier systems, clear trust boundaries inside real wallets, and a threat baseline that survives phishing, replay, ...

"SBOMs in Practice: SPDX, CycloneDX, and CI Automation for Real Systems"SBOMs are easy to generate and hard to trust. This book is written for experienced engineers—security, platform, DevOps, and build/release leaders—who need SBOMs to function as dependable production artifacts rather than compliance checkboxes. It focuses on the realities that break automation: ambiguous component identity, lossy format conversions, incomplete dependency graphs, and the operational drift between...

"Keptn for Delivery & SLOs: Event‑Driven Automation for Cloud‑Native Ops"Modern Kubernetes delivery fails most often not because teams can’t deploy, but because they can’t decide—quickly, repeatably, and defensibly—whether a change is safe. This book is written for experienced platform engineers, SREs, and senior developers who want to replace subjective approvals and brittle pipeline logic with event-driven, evidence-based automation. If you’re operating multi-team clusters and ne...

"OpenTelemetry for GenAI: Tracing Token Costs, Tool Calls, and RAG Latency"Modern GenAI systems fail in expensive, opaque, and highly distributed ways: token spend drifts upward, tool chains hide the true source of latency, and retrieval pipelines quietly erode output quality. This book is written for experienced engineers, platform teams, observability specialists, and AI infrastructure architects who need production-grade visibility into these systems. It shows how to apply OpenT...

"Trivy Deep Dive: Container, IaC, and SBOM Scanning in CI/CD"Security scanning only helps when it changes engineering outcomes—without turning delivery into a game of broken builds and ignored alerts. This book is written for experienced platform, DevOps, and security engineers who already run CI/CD at scale and want a rigorous, operational understanding of how Trivy fits into modern DevSecOps pipelines. It focuses on building durable feedback loops, not one-off scans, and on makin...