wrhn

minherz

Joined 5 months ago

Karma
5
Submissions
11
Member since
May 21
am a Developer Advocate at Google Cloud, specializing in Security and Observability practices across cloud infrastructure and workloads, with a strong focus on AI agents and models. My background includes system architecture and software development. I previously served as a Cloud and DevOps Architect and Engineering Tech Lead. I had engineered diverse solutions ranging from healthcare software to interactive television and gaming applications. I am passionate about technology and frequently share insights about on AI security, event-driven architectures, and modern cloud operations at https://leoy.blog and on Medium (https://medium.com/@minherz).
View on Hacker News

Recent submissions

Comment · 19 days ago
I work as a Developer Advocate at Google Cloud. I recently used Agent Registry as part of exploring AI workload governance capabilities on Google Cloud. I came across a few pitfalls while implementing dynamic discovery and use of MCP servers. However, the main challenge was integrating the use of the registry into my code rather than dealing with the pitfalls.

I gathered my experience into a blog post. I'd appreciate hearing about your experience using dynamically discovered tools, agents or skills.

Comment · 3 months ago
The description of the attack is definitely reads as science fiction. It is hard to assess the details of the attack without information that was left outside of the short story that artistically described the incident.
Comment · 5 months ago
We’ve been building a demo of the multi-agent application that self-host a Gemma LLM for the Cloud Next '26 conference and found that while ADK has a built-in support when the agents calls other remote agents or MCP servers, there is nothing similar when it is configured to use a custom LLM endpoints to Cloud Run (running Ollama/vLLM). Cloud Run's built-in IAM auth is great for security, but the ADK's LiteLLM connector doesn't natively manage the Google-signed ID token lifecycle. This causes agents to fail with 401s once the initial token expires (usually at the 1-hour mark).

This post explores three ways to solve this: Static headers for ephemeral, scale-to-zero workloads. Subclassing LiteLLMClient in Python to dynamically intercept acompletion requests, fetch credentials via ADC, and handle automated token refreshing on HTTP 401 errors. Using a litellm-proxy sidecar container to abstract the authentication entirely. Would love to get any feedback on these patterns!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton