Skip to content
View kimsehwan96's full-sized avatar
🐳
🐳
73 followers · 91 following

Achievements

Achievement: Pair Extraordinairex3Achievement: Pull Sharkx4Achievement: StarstruckAchievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pair Extraordinairex3Achievement: Pull Sharkx4Achievement: StarstruckAchievement: YOLOAchievement: Quickdraw

Highlights

Organizations

@trinodb @dnd-side-project @glow-kor

Block or report kimsehwan96

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kimsehwan96/README.md

Hi, I'm Hayden (김세환) 👋

DevOps Engineer at ABLY · Seoul, Korea

I work on Kubernetes, AI agent infrastructure and the data platform.
When an open-source tool breaks in production, I read the source and fix it upstream.

Blog LinkedIn Email

# $ kubectl get engineer sehwan-kim -o yaml
apiVersion: kimsehwan96.com/v1
kind: Engineer
metadata:
  name: sehwan-kim               # 김세환
  labels:
    nickname: hayden
    role: devops-engineer
    company: ably
    location: seoul
spec:
  experience: 6y+                # since 2020.03
  career: [ingkle, lendit, nrise, ably]   # SWE → DevOps → SRE → DevOps
  focus:
    platform: [kubernetes, eks, karpenter, istio, argo-cd, terraform]
    ai-infra: [mcp-gateway, a2a, agent-platform]
    data-platform: [trino, apache-ranger, starrocks, spark-on-emr]
  shippedUpstreamIn: [python, typescript, javascript, java, go, rust]
  maintains: [pyjosa]            # Korean particle (은/는, 이/가) library on PyPI
  education: Tech University of Korea · Electronic Engineering (Embedded Systems)
status:
  phase: Running
  conditions:
    - type: FixesItUpstream
      status: "True"
    - type: WritesItDown
      status: "True"
      message: https://www.kimsehwan96.com

🧩 Open source

Most of my contributions start from a real problem, usually something that broke in production or docs that didn't match the code. I dig into the source, file an issue with the root cause, and send the fix.

IBM apache awslabs aws-samples BerriAI kubernetes-sigs etcd-io getredash open-feature a2aproject agentgateway aws aws-iot-builder-tools hashicorp influxdata jenkinsci kagent-dev kubernetes n8n-io plotly serverless terraform-aws-modules trinodb

49 merged pull requests · 24 upstream projects

Where the fixes come from

🛰️ One MCP gateway for the whole company
Every engineer's agent reaches internal tools through a single gateway, with team RBAC and OAuth token delegation.
📝 흩어진 MCP를 게이트웨이 하나로 모아 전사 공통 인프라로 만들기까지 (ABLY tech blog) · 사내 단일 MCP Gateway 도입기

  • IBM/mcp-context-forge: IdP-issued token verification via JWKS (#3715), tool execution for team viewers (#3882), OAuth authorization for non-owners (#3935), A2A protocol version selector (#4761) and a run of OAuth/UI fixes
  • agentgateway: RFC 8414 discovery for path-based issuers (#1206)
  • n8n: MCP OAuth aud now matches the advertised resource (#30055)

🔐 Per-user access control on Trino
Apache Ranger policies, with users and groups synced from Google Workspace Secure LDAP.
📝 Trino 에 접근제어 붙이기 1편 · 2편

  • apache/ranger: groups removed from LDAP get hidden (RANGER-5461), membership changes reach the plugins (RANGER-5463), delta sync can be turned off for LDAP servers without uSNChanged (RANGER-5466)
  • getredash/redash: Trino user impersonation, so queries run as the signed-in user (#7605)

☸️ An HA on-prem Kubernetes design
Control plane, etcd and kubeadm internals.
📝 etcd 의 snapshot 과 WAL · kube-apiserver 와 etcd 통신

  • kubernetes-sigs/kubespray: the reset playbook now fully removes the etcd systemd units (#10902)
  • kubernetes/kubernetes: corrected the kubeadm control-plane join comment for external-etcd HA (#124920)
  • etcd-io/website: storage and recovery guide fixes (#827, #833)

Everything, by area

Area Projects · merged PRs
🤖 AI & agent infra IBM/mcp-context-forge 11 · BerriAI/litellm 3 · a2aproject/A2A 1 · agentgateway/agentgateway 1 · kagent-dev/kagent 1 · n8n-io/n8n 1
📊 Data platform apache/ranger 3 · apache/superset 2 · getredash/redash 2 · influxdata/docs-v2 1 · plotly/plotly.js 1 · trinodb/trino-gateway 1
☸️ Kubernetes & cloud native aws-samples/custom-scheduler-eks 3 · kubernetes-sigs/kubespray 3 · etcd-io/website 2 · open-feature/open-feature-operator 2 · aws/amazon-vpc-cni-k8s 1 · kubernetes/kubernetes 1
☁️ Cloud, IaC & CI/CD awslabs/amazon-documentdb-tools 4 · aws-iot-builder-tools/aws-greengrass-provisioner 1 · hashicorp/vault 1 · jenkinsci/jenkins 1 · serverless/serverless-python-requirements 1 · terraform-aws-modules/terraform-aws-eks 1 
merged PRs per year
2021  ███                        3
2022  █                          1
2023  ██                         2
2024  ████████████              13
2025  ████                       4
2026  ████████████████████████  26
All 49 merged pull requests
Merged Project Pull request
2026-09-01 apache/ranger RANGER-5466 Avoid hardcoded delta sync and unnecessary LDAP filter when delta sync is disabled
2026-07-05 apache/superset perf(explore): reuse chart query data in Results tab
2026-06-24 BerriAI/litellm fix(cost): price gpt-image generated output tokens as image tokens
2026-06-04 a2aproject/A2A docs: escape timestamp format to prevent emoji rendering in whats-new-v1
2026-05-27 kagent-dev/kagent fix(ui): use explicit type="button" on ToolsSection buttons
2026-05-22 IBM/mcp-context-forge feat(admin): add A2A protocol version dropdown to agent form
2026-05-18 n8n-io/n8n fix(core): Align MCP OAuth issued aud with advertised resource URL
2026-05-14 plotly/plotly.js Add hoversort option
2026-05-12 BerriAI/litellm [Fix] /v1/messages - plumb client-supplied timeout to httpx call
2026-04-27 BerriAI/litellm fix(health_check): skip max_tokens for image_generation mode
2026-04-21 IBM/mcp-context-forge feat(ui): allow non-owner users to authorize on accessible OAuth gateways
2026-04-17 IBM/mcp-context-forge fix(oauth): parse form-encoded responses in refresh_token()
2026-04-12 IBM/mcp-context-forge feat(auth): verify OAuth access tokens via JWKS for virtual server MCP
2026-04-06 IBM/mcp-context-forge fix(ui): token revoke button sends DELETE with empty token ID (#4046)
2026-04-06 apache/ranger RANGER-5463: Update userstore version after group-user mapping changes in createOrDeleteXGroupUserList
2026-04-03 IBM/mcp-context-forge feat(rbac): add tools.execute permission to team-scoped viewer role
2026-03-25 trinodb/trino-gateway Fix dashboard line chart field name mismatch with API response
2026-03-23 IBM/mcp-context-forge fix: add auth_code guard to set_gateway_state stale cleanup
2026-03-23 IBM/mcp-context-forge fix: preserve server team_id during admin UI edits
2026-03-22 IBM/mcp-context-forge fix(ui): populate issuer field when editing OAuth gateway
2026-03-21 IBM/mcp-context-forge fix(llmchat): mark tool/parsing errors as recoverable in streaming
2026-03-21 IBM/mcp-context-forge fix(llm): align Bedrock GatewayProvider config keys with DB schema
2026-03-12 agentgateway/agentgateway fix: construct RFC 8414 metadata URL correctly for path-based issuers
2026-03-11 getredash/redash Add annotated query option in trino datasource
2026-01-28 apache/ranger RANGER-5461: Fix incorrect condition in computeDeletedGroups() causing deleted groups not marked as HIDDEN
2026-01-24 getredash/redash Add impersonation option in trino datasource
2025-05-08 aws-samples/custom-scheduler-eks Add volumeattachments resource handling permission in service account
2025-03-20 aws-samples/custom-scheduler-eks Add v1.31, v1.32 image tag and update other versions
2025-01-13 open-feature/open-feature-operator fix: Add --port argument in flagd pods for set flagd service port
2025-01-13 aws-samples/custom-scheduler-eks Add clientConnection helm values and apply it in configmap template
2024-12-04 awslabs/amazon-documentdb-tools Change --check-target action like boolean flag and change some print statement condition
2024-12-04 awslabs/amazon-documentdb-tools Fix missed case changes in data-differ.py
2024-12-03 awslabs/amazon-documentdb-tools Fix some camel cased args into kebab case
2024-12-02 awslabs/amazon-documentdb-tools Fix typo in data-differ README.md example usage section
2024-10-02 open-feature/open-feature-operator fix!: Fix typo flagsValidatonEnabled into flagsValidationEnabled
2024-07-17 aws/amazon-vpc-cni-k8s Update vpc_ip_resource_limit.go link in README.md
2024-05-17 kubernetes/kubernetes Update an incorrect comment in kubeadm controlplane join phase
2024-05-14 kubernetes-sigs/kubespray Change a task name in preinstall/0080-system-configurations.yml
2024-05-03 kubernetes-sigs/kubespray Merge stops and removes systemd services tasks in reset playbook
2024-04-11 etcd-io/website Fix command line example status of snapshot section in op-guide/recovery
2024-04-05 etcd-io/website Fix missing backslash in learning/persistent-storage-files.md
2024-02-25 serverless/serverless-python-requirements Add docker rootless feature flag and its implementation for supporting docke rootless environment
2024-01-24 kubernetes-sigs/kubespray Fix typo mistake in roles/kubernetes/control-plane/tasks/define-first-kube-control.yml
2023-08-17 hashicorp/vault docs: Add more keycloak oidc URL, URIs information
2023-05-17 terraform-aws-modules/terraform-aws-eks docs: Add more description in cluster_encryption_config input variable
2022-03-25 jenkinsci/jenkins Add more Korean translation (improve)
2021-03-23 apache/superset chore: Improve Korean translation
2021-02-05 influxdata/docs-v2 fix: wrong file name in get-started.md
2021-01-08 aws-iot-builder-tools/aws-greengrass-provisioner Add commandline for installing python3-devel.x86_64 in Dockerfile.run

✍️ Latest posts

More on kimsehwan96.com, where I write (in Korean) about Kubernetes internals, Istio, etcd, AWS and MCP/AI infrastructure.

📊 GitHub stats

GitHub stats

📫 sktpghks138@gmail.com · The open-source and blog sections refresh daily via GitHub Actions.

Pinned Loading

  1. kubernetes/kubernetes kubernetes/kubernetes Public

    Production-Grade Container Scheduling and Management

    Go 128k 45.5k

  2. pyjosa pyjosa Public

    간단한 파이썬 🇰🇷 한글 조사처리 라이브러리 은/는 와/과 이/가 등을 처리합니다. PyPI에 배포한 오픈소스 프로젝트입니다.

    Python 25 1

  3. car-iot-platform-from-kpu car-iot-platform-from-kpu Public archive

    한국산업기술대학교 졸업작품 팀 레포지토리 Korea Polytechnic University Graduation Project Repo (산기대)

    Python 18

  4. getredash/redash getredash/redash Public

    Make Your Company Data Driven. Connect to any data source, easily visualize, dashboard and share your data.

    Python 28.8k 4.6k

  5. IBM/mcp-context-forge IBM/mcp-context-forge Public

    An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool c…

    Python 4.5k 887

  6. apache/ranger apache/ranger Public

    Apache Ranger - Centralized, fine-grained authorization and auditing across data and AI platforms

    Java 1.1k 1.1k