Engineering notes by Lokesh Ram Chand · 23 dispatches
· 2 min read · GitHub Actions, Open Source, CI/CD, Community
My PR to accesscraft adds issue forms, contribution policies and CI automation. None of it is code, and all of it decides whether people can contribute.
· 2 min read · Go, CNCF, Testing, Open Source
cncf/automation's link checker marked valid GitHub pages like /sponsors and /topics as broken. I made it double-check against github.com before reporting a 404.
· 2 min read · Go, CNCF, KubeVirt, CI/CD, Security, Open Source
The KubeVirt cloud runner in cncf/automation hid its JIT config so well that the runner never received it. I made it substitute the value again and still keep it out of the logs.
· 2 min read · Go, CNCF, CI/CD, Security, Open Source
The OCI cloud runner in cncf/automation ran its start script with bash -x, which traced the GitHub Actions JIT config into the logs. Removing one flag fixed it.
· 2 min read · Java, Apicurio Registry, Jackson, Open Source, Debugging
An integer prompt-template variable with a default of 5.0 failed its own type check in Apicurio Registry, because Jackson reads every decimal literal as a Double.
· 2 min read · Go, Milvus, Observability, Open Source, Debugging
Birdwatcher's pprof command archived 0-byte entries for unreachable Milvus nodes and printed the same success message for them. Here's my fix.
· 2 min read · Go, Milvus, Reflection, Open Source, Debugging
Birdwatcher's verify-segment command was fully written but never registered, because its method was named VerifySegmentCommnad. Fixing the typo exposed a startup panic.
· 3 min read · Java, Apicurio Registry, Open Source, Schema Compatibility, Debugging
A code comment said this case was already handled. It wasn't, and I only found out because a sibling method handled the same case properly.
· 2 min read · Go, Milvus, etcd, Concurrency, Open Source
Birdwatcher's load-backup could report success while dropping keys, because worker goroutines raced on a shared err. I replaced the pattern with errgroup.
· 2 min read · Security, Vue, Web Performance, Open Source
I ran a security and production audit on this site. It found an XSS hole in the blog, two vulnerable dependencies, a dead permalink and missing security headers.
· 2 min read · Go, Milvus, etcd, Protobuf, Debugging, Open Source
A repair command in Birdwatcher, Milvus's diagnostic tool, could report success while writing corrupted protobuf bytes to etcd. Here's how I found and fixed it.
· 2 min read · Go, Meshery, Kubernetes, Concurrency, Security, Open Source
Meshery spawned one unbounded goroutine per Kubernetes context in an uploaded kubeconfig. I capped it with a semaphore so one request can't exhaust the server.
· 2 min read · Meshery, Go, API Contracts, Bug Fixing, Open Source, Software Engineering
I read Meshery's naming-convention doc closely and found 20 handlers that would break pagination the day the frontend moved to generated clients.
· 2 min read · Go, Milvus, etcd, Open Source, Debugging
FileAuditKV.MultiSave in Birdwatcher always returned 'not implemented'. That broke one repair command outright and made restore silently write zero keys.
· 2 min read · Python, Milvus, pymilvus, Validation, Open Source
pymilvus's binary-vector check raised a raw TypeError on None values instead of returning False. Swapping two lines fixed it.
· 3 min read · Machine Learning, FastAPI, MongoDB, Docker, Security, Production Readiness
What my pre-production audit of Velar found: zero indexes, a root container, a concurrency race, and two security bumps that broke things.
· 2 min read · PostgreSQL, TypeScript, Nango, Databases, Open Source
A Postgres trigger in Nango hard-deleted an API key whenever any of its environments was removed, even if the key still belonged to others. I made it relation-aware.
· 2 min read · TypeScript, Node.js, Testing, Open Source, Debugging
roster's v1 to v2 HITL migration refused valid history whenever two events landed in the same millisecond. The ledger already had a sequence number that fixed it.
· 2 min read · Machine Learning, FastAPI, MongoDB, System Architecture, LLM
I put three cheap, deterministic layers in front of the LLM in Velar, and gave the pipeline permission to say 'I don't know.'
· 2 min read · Machine Learning, FastAPI, MongoDB, Milvus, Ollama, RAG, System Architecture, Privacy
How I kept Velar's explanations local and grounded: Ollama for embeddings and generation, Milvus for lookup, and an early return when there's nothing to ground on.
· 2 min read · Machine Learning, FastAPI, MongoDB, System Architecture, Engineering
How I made merchant trust an explicit state in Velar, the race condition I almost shipped, and the decay question I still haven't answered.
· 2 min read · DevOps, Infrastructure, Engineering
How my reverse proxy config went from one fragile file to something I can change without fear, and the reload mistake I kept making.
· 2 min read · Architecture, Self-Hosting, Cloud
Why I built my own cloud on Proxmox, and what I learned getting a static IP, a reverse proxy, Keycloak and monitoring running at home.