How to Install and Configure the NVIDIA GPU Operator on Kubernetes

TL;DR The NVIDIA GPU Operator automates the software stack required to make GPUs usable by Kubernetes workloads. It can deploy and manage NVIDIA drivers, the NVIDIA Container Toolkit, the Kubernetes device plugin, GPU Feature Discovery, DCGM Exporter, MIG Manager, and validation components. A successful installation requires more than running a Helm command. The GPU hardware … Explore: How to Install and Configure the NVIDIA GPU…

MCP Is the Tool Plane, Not the Agent Controller: Enterprise Agent Control Plane Series, Part 1

TL;DR Use Model Context Protocol as the governed interface through which agents discover and invoke enterprise capabilities, but do not treat MCP as the complete controller for an autonomous agent system. The clean separation is: The agent proposes. The controller authorizes. MCP carries the governed interaction. The runtime executes and verifies. MCP standardizes client-server communication, … Explore: MCP Is the Tool Plane, Not the Agent…

VVF 9.0 vs VCF 9.1: The Real Difference Between a Workload Platform and a Private Cloud

Decision shortcut: Product choice and release choice are separate This article compares VVF 9.0 with VCF 9.1, so it spans both a product boundary and a release boundary. A newer feature alone is not evidence that you need the full private-cloud platform. Jump to the side-by-side comparison, release-gap explanation, or practical transition path. Validate requirements … Explore: VVF 9.0 vs VCF 9.1: The Real Difference…

How to Take an AI Agent from Prototype to Production: A Production-Readiness Checklist

TL;DR An AI agent is not production-ready because it can complete a demonstration. It is production-ready when the organization can prove who is acting, what state is retained, which tools are permitted, how behavior is evaluated, what telemetry is captured, where approvals interrupt execution, how cost is bounded, how failures are contained, and who owns … Explore: How to Take an AI Agent from Prototype…

VCF Upgrade Field Guide: Planning the Maintenance Move

Moving from VCF 9.0 to VCF 9.0.1 looks small on paper. It is not a platform redesign, not a brownfield conversion, and not the same class of change as a major-version upgrade. That is exactly why it deserves discipline. Maintenance upgrades are where teams are tempted to move too quickly. The release appears incremental, the … Explore: VCF Upgrade Field Guide: Planning the Maintenance Move

Private AI Is Not Model Hosting: A Reference Architecture for Sovereignty, Identity, GPUs, and Operations on VCF 9.1

Most private AI conversations start too low in the stack. The first question is usually some version of, “Can we run the model on-prem?” That is not a bad question, but it is not the architecture question. Running a model on-premises proves that you can place compute near data. It does not prove that you … Explore: Private AI Is Not Model Hosting: A Reference…

20 Essential GitHub Repositories for AI Agents, MCP, A2A, and Agent Security in 2026

TL;DR The essential AI agent repository list in 2026 is no longer just a collection of frameworks and tutorials. A credible engineering stack now includes protocol specifications, official SDKs, server discovery, agent-to-agent interoperability, durable orchestration, evaluation, OpenTelemetry-compatible tracing, red teaming, and operational security guidance. This refresh identifies 20 repositories that help architects and engineers build … Explore: 20 Essential GitHub Repositories for AI Agents, MCP,…

20 Free Local AI Tools You Can Run on Windows, macOS, and Linux in 2026

TL;DR Local AI in 2026 is no longer limited to a command-line chatbot. A practical local stack can include model runtimes, desktop assistants, private document search, coding agents, visual orchestration, image workflows, transcription, and offline translation. The best starting point depends on the layer you need. Ollama, llama.cpp, KoboldCpp, LocalAI, and TextGen focus on model … Explore: 20 Free Local AI Tools You Can Run…

VCF 5.2.x to 9.1 Upgrade Runbook: Exact Sequence, Dependencies, Downtime, and Validation

TL;DR A VCF 5.2.x to 9.1 upgrade is not a single SDDC Manager update followed by routine infrastructure patching. It is a dependency-controlled platform transition that begins with the Operations layer, introduces mandatory VCF Management Services, and then moves through NSX, vCenter, ESX, and NSX Edge finalization. The first gate is source-release eligibility. Current Broadcom … Explore: VCF 5.2.x to 9.1 Upgrade Runbook: Exact Sequence,…

Automating VCF 9.1 VPC Networking with PowerCLI: IP Blocks, Subnets, NAT, and External IPs

TL;DR VCF 9.1 expands the VMware.VimAutomation.Vpc module so PowerCLI can build much more of the VPC networking foundation, including IP blocks, external connections, transit gateways, connectivity profiles, VPCs, subnets, and external-IP assignments. The practical automation pattern is to build provider-owned connectivity first, create application-owned VPC objects second, and publish selected private workloads by assigning an … Explore: Automating VCF 9.1 VPC Networking with PowerCLI: IP…

VCF 9.1 VPC Networking: Distributed vs. Centralized Transit Gateway Designs

TL;DR VCF 9.1 supports two distinct approaches for connecting Virtual Private Clouds to the physical data center network. A Distributed Transit Gateway removes NSX Edge nodes, the Tier-0 gateway, and BGP from the north-south forwarding path. Traffic can leave directly from the ESXi host through a VLAN shared by every participating host. The design reduces … Explore: VCF 9.1 VPC Networking: Distributed vs. Centralized Transit…

MCP Registry in 2026: How to Discover, Verify, and Safely Connect MCP Servers

TL;DR The MCP Registry makes server discovery more consistent, but it does not turn a listed server into a trusted server. In 2026, the official registry provides namespace verification, standardized metadata, package references, remote endpoint definitions, version records, and an API that downstream registries can consume. It does not certify that the code is secure, … Explore: MCP Registry in 2026: How to Discover, Verify,…

Enterprise MCP Authorization: IdP, RBAC, Workload Identity, and Zero-Touch OAuth

TL;DR Enterprise MCP authorization is not solved by adding a login page to every MCP server. The scalable pattern is to make the enterprise identity provider the policy authority for human access, map groups and application roles to narrow MCP scopes, use separate workload identities for agents and automation, and preserve downstream resource authorization at … Explore: Enterprise MCP Authorization: IdP, RBAC, Workload Identity, and…

Deploy Linux VMs on vSphere with cloud-init and GuestInfo: A Complete PowerCLI Guide

TL;DR PowerCLI can clone a Linux template, write cloud-init metadata and user data into vSphere GuestInfo settings, and power on a fully initialized virtual machine without attaching a seed ISO or maintaining a traditional guest customization specification. The reliable deployment sequence is: The reusable PowerCLI script in this guide implements that workflow for Ubuntu, Rocky … Explore: Deploy Linux VMs on vSphere with cloud-init and…

VCF 9.1 API with Postman: Generate a Collection from OpenAPI and Automate Your First Workflow

TL;DR VMware Cloud Foundation 9.1 provides an OpenAPI definition for SDDC Manager that can be imported into Postman to generate a structured collection of API requests. The generated collection is not immediately ready for use. The specification defines a localhost server value, so the requests must be updated to use a variable that points to … Explore: VCF 9.1 API with Postman: Generate a Collection…

HCX 9.1 Migration Runbook: Network Profiles, Compute Profiles, Service Mesh, and First VM Move

TL;DR An HCX 9.1 migration should not begin with the Migrate Virtual Machines button. It should begin with a dependency-ordered runbook that proves routing, firewall policy, IP pools, site pairing, Network Profiles, Compute Profiles, Service Mesh health, and Network Extension behavior before a production workload is touched. The practical sequence is: Introduction HCX failures often … Explore: HCX 9.1 Migration Runbook: Network Profiles, Compute Profiles,…

Nutanix AOS 7 and AHV 10 Upgrade Runbook: LCM Prechecks, Order, Rollback, and Validation

TL;DR What This Runbook Accomplishes The objective is to move a production Nutanix AHV cluster from an approved source state to an approved AOS 7.x and AHV 10.x target while preserving data availability, workload service, manageability, and recovery options. The runbook assumes: This is not a universal procedure for single-node clusters, two-node clusters, Metro Availability … Explore: Nutanix AOS 7 and AHV 10 Upgrade Runbook:…

Nutanix CVM Troubleshooting Command Reference: Stargate, Curator, Cassandra, Genesis, and Cluster Health

TL;DR A Nutanix CVM incident should be investigated as an evidence chain, not as a race to restart services. Begin with cluster status, compare local and cluster-wide service state, check resiliency, identify the service that owns the symptom, collect its logs, and use targeted NCC checks to validate what you found. This reference is intentionally … Explore: Nutanix CVM Troubleshooting Command Reference: Stargate, Curator, Cassandra,…

OpenTelemetry for AI Agents: Trace Models, Tool Calls, Tokens, Latency, and Cost

TL;DR AI agent observability requires more than a request log and a model latency chart. A single agent invocation can contain planning, multiple model calls, tool execution, retries, retrieval, memory operations, and nested agents. OpenTelemetry’s developing Generative AI semantic conventions now provide a common vocabulary for many of those operations, including agent, workflow, model, and … Explore: OpenTelemetry for AI Agents: Trace Models, Tool Calls,…

How to Secure an MCP Server with OAuth 2.1, Scoped Access, and Audit Logging

TL;DR A production Model Context Protocol server should not treat possession of any bearer token as sufficient authority. It should validate who issued the token, confirm that the token was minted for that specific MCP resource, enforce narrowly defined scopes at both the transport and tool layers, and record authorization decisions without logging credentials or … Explore: How to Secure an MCP Server with OAuth…