Suraj Deshmukh

Suraj Deshmukh's talks at conferences

Sat, 30 Mar 2024 01:00:51 +0530

List of all the talks presented by me

Setting Up OpenClaw with Azure AI Foundry

Sun, 22 Feb 2026 10:00:00 +0530

Learn how to configure OpenClaw to use Azure AI Foundry models, giving you a self-hosted AI assistant accessible from Telegram and other chat apps.

Running Linux Containers Natively on macOS with Apple's Container CLI

Fri, 20 Feb 2026 10:00:00 +0530

Learn how to use Apple's container CLI tool to run Linux containers as lightweight VMs on macOS with sub-second startup times

Deploying Kimi K2.5 on Azure: A Complete Guide to Running MoonshotAI's Model

Mon, 09 Feb 2026 10:00:00 +0530

Learn how to deploy and configure Kimi K2.5 on Azure AI Foundry with this step-by-step guide.

Running Docker Commands on a Remote Machine via SSH

Sun, 01 Feb 2026 10:00:00 +0530

Learn how to execute Docker commands on a remote machine from your local terminal using SSH and Docker contexts

Using Claude Code with GitHub-Hosted Anthropic Models

Sat, 31 Jan 2026 10:00:00 +0530

Learn how to use Claude Code CLI with GitHub Models by proxying requests through litellm-proxy

Using LLMs to write meaningful commit messages from CLI

Thu, 17 Jul 2025 15:21:07 -0800

Learn how to use the llm CLI tool with GitHub Copilot models to generate meaningful commit messages directly from your terminal.

Deploying Grok-3 on Azure: A Complete Guide to Running xAI's Latest Model

Tue, 24 Jun 2025 09:21:07 -0800

Learn how to deploy and configure Grok-3 on Azure AI Foundry with this step-by-step guide. Set up your own instance of xAI's powerful language model in the cloud.

Deploying OpenAI Text-to-Speech (TTS) Model on Azure: A Step-by-Step Guide

Sat, 31 May 2025 09:21:07 -0800

Learn how to quickly and effectively deploy an OpenAI text-to-speech (TTS) model on Azure with easy-to-follow Azure CLI commands. Boost your applications with advanced speech generation capabilities.

Open Source Confidential Containers (CoCo) on Azure

Fri, 05 Apr 2024 09:21:07 +0530

Explore how Azure’s support for nested confidential compute unlocks a straightforward path to deploying Confidential Containers (CoCo), ensuring enhanced data security in the cloud with ease.

Fight Your Instincts — Your Default Behaviour is Hurting You

Fri, 29 Oct 2021 11:05:07 +0530

We behave in a certain way. It is shaped by various factors like our upbringing, environment, privilege, etc. But most of the time, it is shaped by our instincts. Until pointed out, we continue to act with our instincts. This instinct-driven behavior is our default behavior.

I am making a case that anyone who has never rebelled against or resisted their default behavior will find it hard to achieve success in this world. All the successful people we see have done something that required fighting the default behavior, which led them to achieve something exceptional and become successful.

Learnings from 'Atomic Habits'

Tue, 26 Oct 2021 09:21:07 +0530

Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones

Unchanging Contexts and Degrading Productivity

Sat, 11 Sep 2021 17:09:07 +0530

How doing everything from the same place has affected the the productivity of everything.

Certified Kubernetes Security Specialist CKS exam tips

Sat, 04 Sep 2021 13:30:07 +0530

Things to keep in mind to clear exam effortlessly.

Learnings from 'Sapiens'

Sat, 14 Aug 2021 10:45:07 +0530

Sapiens: A Brief History of Humankind

Reading Devices

Wed, 30 Jun 2021 01:45:00 +0530

Pros and Cons of various reading devices

How to 'automatically' generate a self-signed TLS certificate for Kubernetes Admission Webhook Servers?

Fri, 25 Jun 2021 09:00:00 +0530

A simple Helm chart to generate TLS x509 certificates.

How to create a Systemd daemon quickly?

Sat, 19 Jun 2021 16:16:00 +0530

If you have a script or a binary and want to run it as a Systemd service, keep following. This blog will show you how to take any such executable code and run it using Systemd. Sure, you can do similar stuff using Docker as well. Although there are certain downsides of using Docker (alone) for managing the daemons. Systemd is good at log management on the node over a Docker container. If a container fails, you may or may not have access to the logs. Systemd provides constructs in managing dependencies quite well. And finally, you may not be using Docker on the machine, while Systemd is quite ubiquitous on any Linux.

How to import 'any' Kubernetes package into your project?

Sun, 30 May 2021 09:40:00 +0530

The client libraries that Kubernetes ships are meant to be imported, and you definitely don’t need this post explaining how to import them in your Golang based project. A simple go get ... should do the trick. But, what about the packages that are not meant to be imported? Or the ones that cannot be imported because of “technical reasons” ? Could you simply add them to your import statements in the .go file, and the go binary will do the right thing when you build the code? Well, let’s find that out!

How to generate a self-signed TLS certificate for Kubernetes Admission Webhook Servers?

Fri, 21 May 2021 15:33:07 +0530

A simple binary to generate TLS x509 certificates.

Learnings from 'The Psychology of Money'

Thu, 20 May 2021 12:15:07 +0530

Synopsis of the Book

The Psychology of Money, written by Morgan Housel, published in 2020, could be categorised under Psychology, Finance, and Nonfiction. The author wrote an article three years ago which got a lot of traffic hence decided to write a book out of it. Last year I saw that the book was recommended by many folks in my network and on Twitter. All of the recommenders were highly impressed by the book and spoke intensely of it. Now that I have finished it, I can understand why!

Mitigation of: Access Any Kubernetes Secret

Thu, 20 May 2021 08:47:07 +0530

A Validating Admission Webhook Server to deny anyone accessing forbidden Kubernetes Secrets!

Access Any Kubernetes Secret

Sat, 08 May 2021 12:17:07 +0530

A little trickery and access any Kubernetes Secret!

Religious Rituals Don't Scale With Population

Mon, 12 Apr 2021 07:07:07 +0530

How Hindus need to introspect and evolve!

Monitor your PC with Prometheus Grafana stack

Fri, 02 Apr 2021 07:07:07 +0530

Get a fine grained view of the happenings on your system!

Kubernetes The Hard Way in "Vagrant"?

Tue, 23 Mar 2021 07:07:07 +0530

The first step in your CKA preparation!

How we manage Kubernetes Bangalore Meetup?

Wed, 17 Mar 2021 07:07:07 +0530

The method of stress-free event management!

On Compounder Skills

Tue, 16 Mar 2021 07:07:07 +0530

The foundational skills which improves everything else.

Importance of Typing Skills

Sun, 28 Feb 2021 07:07:07 +0530

The foundational skill which improves everything else.

My Knowledge Management Journey

Tue, 23 Feb 2021 09:07:07 +0530

The story of various tools I have used over last five years.

Book: How Innovation Works

Wed, 10 Feb 2021 21:43:07 +0530

And Why It Flourishes in Freedom by Matt Ridley

Enable TLS bootstrapping in a Kubernetes cluster

Sat, 06 Feb 2021 10:25:41 +0530

Add a new node using a bootstrap token to Kubernetes

Kubernetes Cluster using Kubeadm on Flatcar Container Linux

Fri, 29 Jan 2021 22:02:41 +0530

Simple steps to install the cluster based on Flatcar Container Linux

Exec in container environment

Sat, 23 Jan 2021 10:10:41 +0530

The correct way to use exec and the signal passing.

Monitor releases of your favourite software

Sun, 17 Jan 2021 12:28:51 +0530

Be on top of the releases of the software you rely upon!

Mental models for understanding Kubernetes Pod Security Policy

Sat, 16 Jan 2021 13:10:51 +0530

Getting the game of PSP right!

Linux Partitioning Guide

Mon, 11 Jan 2021 17:00:51 +0530

How to create partitions for Linux?

Book Review: How to Take Smart Notes

Sat, 28 Nov 2020 21:30:07 +0530

One Simple Technique to Boost Writing, Learning and Thinking – for Students, Academics and Nonfiction Book Writers by Sönke Ahrens

Book Review: Algorithms to Live by — The Computer Science of Human Decisions

Sun, 11 Oct 2020 17:30:07 +0530

Authors: Brian Christian and Tom Griffiths

How to gracefully kill Kubernetes Jobs with a sidecar?

Sat, 29 Aug 2020 15:33:51 +0530

A sidecar in a Kubernetes Job, what? Yeah you might need one and here is how to shut it.

Use Configmap for Scripts

Sat, 22 Aug 2020 21:00:51 +0530

A new way to ship scripts to container images.

Being Productive with Git

Sun, 16 Aug 2020 22:00:51 +0530

Tips and tricks to make your day to day usage easier.

Being Productive with Kubectl

Sun, 02 Aug 2020 16:00:51 +0530

Tips and tricks to make your day to day usage easier

How to backup and restore Prometheus?

Fri, 31 Jul 2020 19:00:51 +0530

Backing up Prometheus??!!

Book Review: Getting Things Done

Thu, 30 Jul 2020 16:00:07 +0530

The Art of Stress-free Productivity - David Allen

Framework for managing random scripts and binaries

Sat, 18 Jul 2020 19:00:51 +0530

This is an explanation of the framework that I have created to manage scripts and binaries.

Opinion: Contemporary world vis-à-vis 1984 by George Orwell

Sun, 05 Jul 2020 11:30:07 +0530

The Unsettling Similarity of Timeless Dystopian Novel.

Book Review of Einstein: His Life and Universe

Sat, 20 Jun 2020 11:30:07 +0530

Authored by Walter Isaacson

Watch Container Traffic Without Exec

Sat, 06 Jun 2020 20:30:07 +0530

How to watch the traffic of a container or a pod without execing into the pod/contaienr?

Enabling Seccomp on your Prometheus Operator and related Pods

Tue, 14 Apr 2020 11:57:07 +0530

This post shows how you can enable seccomp on all the Pods that are deployed with Prometheus Operator

Capabilities on executables

Tue, 25 Jun 2019 15:15:07 +0530

Note on Linux Kernel capabilities

Root user inside container is root on the host

Tue, 25 Jun 2019 11:57:07 +0530

The easiest way to prove that root inside the container is also root on the host

Project specific scripts

Sun, 23 Jun 2019 11:57:07 +0530

Instead of polluting your PATH the easier way to put project specific scripts

Copying files to container the generic way

Fri, 21 Jun 2019 11:57:07 +0530

No docker cp needed to copy files from host to your container

Writing your own Seccomp profiles for Docker

Mon, 10 Jun 2019 11:57:07 +0530

Understanding the seccomp profile json format

Kubernetes Bangalore March 2019 Event Report

Thu, 21 Mar 2019 01:00:51 +0530

Event Report for Kubernetes Bangalore Meetup

Make static configs available for apiserver in minikube

Sun, 20 Jan 2019 01:00:51 +0530

Dealing with apiserver in minikube can be tricky

Recreate Kubernetes CVE-2017-1002101

Mon, 14 Jan 2019 01:00:51 +0530

Subpath Volume Mount could give you access to node

Cobra and Persistentflags gotchas

Fri, 04 Jan 2019 01:00:51 +0530

How wrong usage of persistent flags can burn you

Old laptop setup reference

Sun, 30 Dec 2018 01:00:51 +0530

Links and things to do while setting up older Dell Inspiron 1525

Add new Node to k8s cluster with Bootstrap token

Wed, 24 Oct 2018 01:00:51 +0530

Use this technique to add new node to the cluster without providing any certificates and without having to restart the kube-apiserver

PodSecurityPolicy on existing Kubernetes clusters

Tue, 23 Oct 2018 00:00:51 +0530

Burnt by enabling PSPs on existing Kubernetes and wondering why everything still works

Road to CKA

Sun, 21 Oct 2018 00:00:51 +0530

My experience with CKA exam preparation

How to disable your Chrome Ctrl + W keybinding

Tue, 16 Oct 2018 22:00:51 +0530

Learn how to disable the shortcut Ctrl + W altogether on your GNOME

Add new Node to k8s cluster with cert rotation

Tue, 16 Oct 2018 01:00:51 +0530

Use this technique to add node to the cluster without providing any certificates

Adding new worker to existing Kubernetes cluster

Sun, 23 Sep 2018 01:00:51 +0530

Step by step guide to add new node

Single node Kubernetes Cluster on Fedora with SELinux enabled

Tue, 11 Sep 2018 01:00:51 +0530

Kubeadm to install Single Node K8S with SELinux

HostPath volumes and it's problems

Mon, 10 Sep 2018 01:00:51 +0530

Kubernetes HostPath volume good way to nuke your Kubernetes Nodes

HTTPS during development using 'mkcert'

Tue, 14 Aug 2018 01:00:51 +0530

Use https even during your development

Golang struct tags gotchas

Sun, 12 Aug 2018 01:00:51 +0530

Struct tags can give you problems you didn't see coming ;-)

Access etcd in OpenShift origin

Wed, 11 Jul 2018 01:00:51 +0530

Access the etcd in OpenShift started by oc cluster up

Change namespaces in Kubernetes

Mon, 02 Jul 2018 08:00:51 +0530

Easy way to change namespace in Kubernetes

Prometheus with existing application on OpenShift

Wed, 04 Apr 2018 08:00:51 +0530

Setting up Prometheus with any application

Notes on talk - Advanced testing in golang by Mitchell Hashimoto

Wed, 07 Mar 2018 02:21:49 +0530

This talk has really great takeaways which are worth considering while writing your tests

Methods that satisfy interfaces in golang

Fri, 23 Feb 2018 08:00:51 +0530

What receiver type methods satisfy which interface, can be understood here.

vscode Shortcuts

Thu, 22 Feb 2018 08:00:51 +0530

Shortcuts for vscode and some notes

Using private container registries from minikube

Fri, 06 Oct 2017 19:32:33 +0530

A guide to how would you download image from private container registry in minikube

Static Pods using Kubelet on Fedora

Sat, 23 Sep 2017 13:10:14 +0530

Extension to the Kelsey Hightower's tutorial on 'Standalone Kubelet'

Sharing Vagrant Box offline

Mon, 18 Sep 2017 10:43:46 +0530

Share Vagrant boxes like you shareed Operating System ISOs

Add new Maps to Counter Strike

Fri, 01 Sep 2017 16:03:58 +0530

Steps to add new maps to CS

List of Kubernetes Bangalore meetup event report

Fri, 01 Sep 2017 15:51:16 +0530

List of all the Kubernetes and OpenShift meetup event reports

Kubernetes Learning resources

Thu, 17 Aug 2017 23:12:18 +0530

Places you can find learning material for Kubernetes

Bangalore Kubernetes Meetup July 2017

Thu, 13 Jul 2017 22:46:40 +0530

Kubernetes Meetup presentation and talks

Clean Node setup

Tue, 04 Jul 2017 22:50:43 +0530

This will help in intalling node without sudo

Bangalore Kubernetes Meetup May 2017

Wed, 24 May 2017 02:21:49 +0530

Kubernetes and OpenShift 101 hands-on workshop

Enabling local development with Kubernetes

Sun, 23 Apr 2017 15:57:07 +0530

If you are doing development and want to use kubernetes for it, then here is how you can do it.

Quick PV for local Kubernetes cluster

Tue, 18 Apr 2017 23:56:15 +0530

A hostPath based local PV creation process for using via PVC

Bangalore Kubernetes Meetup April 2017

Sat, 08 Apr 2017 14:31:33 +0530

Like many Saturday mornings, Red Hat Bangalore office was once again abuzz with enthusiasm on 8th of April, for hosting yet another successful chapter of Bangalore Kubernetes Meetup. The Meetup had a good turnaround of about 40 people who gave up on their early morning saturday sleep to attend it despite the sweltering hot season and in line were four awesome talks.

Suraj Deshmukh set the stage with his opening talk, Kubernetes on CRI-O, wherein he explained different jargons like OCI, CRI, etc., introduced CRI-O and it’s architecture. Explaining how it glues Kubernetes and OCI compliant runtimes and concluding it with a demo showing how Kubernetes uses CRI-O. Link to slides, video.

k8s on CRI-O - single node

Sat, 08 Apr 2017 00:11:37 +0530

How to make kubernetes use CRI-O as container runtime

TODOs for new project

Sun, 26 Mar 2017 18:19:15 +0530

Things to do to make a project successful

rpm Notes

Fri, 24 Mar 2017 10:35:54 +0530

General notes about rpm packaging and references to upstream docs

Git Notes

Tue, 21 Mar 2017 22:03:48 +0530

Contains notes about using git

Intellij Shortcuts

Fri, 17 Mar 2017 14:41:51 +0530

Shortcuts of intellij and also some short notes

Packaging 'kompose' for centos paas sig

Wed, 15 Mar 2017 14:16:43 +0530

Note: This is a living document and will be updated from time to time.

Following are steps to package kompose for CentOS PAAS SIG. CentOS PAAS SIG is a repository of packages where rpms related to OpenShift and eco-system around it are delivered.

Setup your machine

Install packages needed

sudo yum update -y && \
sudo yum install -y epel-release && \
sudo yum install -y rpm-build go redhat-rpm-config make koji \
                    gcc byobu rpmlint rpmdevtools centos-packager

Setup certs

Testing 'fedora' and 'CentOS' kompose package

Tue, 14 Mar 2017 00:31:57 +0530

I generally do kompose package testing for fedora and CentOS. So here are the steps I follow.

Fedora

For respective fedora version use the tag respectively for e.g. 25 for fedora 25.

Starting the environment:

docker run -it registry.fedoraproject.org/fedora:26 bash

Running tests:

# Inside the container
# Pull packages from the testing repository
dnf --enablerepo updates-testing -y install kompose

# Check the kompose version
kompose version

# Install the testing dependencies
dnf install -y jq make

# Pull the git repository to run the functional tests
git clone https://github.com/kubernetes/kompose/
cd kompose
git reset --hard $(kompose version | cut -d "(" -f2 | cut -d ")" -f1)

# Run cmd tests
make test-cmd

CentOS `epel` repo

Spin the CentOS environment in container.

First post

Mon, 13 Mar 2017 00:31:57 +0530

This is the new home for my blog. I use to write on wordpress before. You can find the older blog at https://deshmukhsuraj.wordpress.com. But I wanted to have my own domain and wordpress was charging exorbitantly to connect a custom domain to wordpress, so I just ditched it and started writing here. This is much more convenient.

About me

Mon, 01 Jan 0001 00:00:00 +0000

Bio

I am a Senior Software Engineer at Microsoft, where I work on the Confidential Containers project, a CNCF sandbox initiative that aims to provide a secure and private way to run containerized workloads on Kubernetes. I have been involved in the Kubernetes space for over six years and has worked for Red Hat and Kinvolk on various Kubernetes technologies such as OpenShift, service-meshes, Helm, Lokomotive, etc. I have also contributed to several Kubernetes upstream projects, including Kubernetes, Kubernetes docs, Contour, Podman, and Crio. I hold CKA and CKS certifications, and I was also an organizer of the Kubernetes Bangalore meetup group from 2017 to 2022. I have spoken at numerous conferences and events, such as Kubecon, Pycon India, DevOpsDays Bangalore, FOSDEM, Cloud Native Rejekts, and DevConf.