Kubernetes
Kubernetes (abbreviated K8s) is an open-source container orchestration platform originally designed by Google and donated to the Cloud Native Computing Foundation (CNCF) for maintenance. It automates the deployment, scaling, and management of containerized applications, supporting container scheduling and load balancing across multi-host clusters. Core capabilities include service discovery, rolling updates, and automatic recovery, making it a foundational infrastructure component for cloud-native application architectures.
Core Facts
Go compiles to a single binary file with no complex runtime dependencies, making it easy to deploy quickly across various environments.
容器技术（以Docker为代表）利用Linux内核的namespace机制实现进程、网络、文件系统隔离，借助cgroups限制CPU、内存等资源用量
Harness Engineering概念源自软件测试领域的Test Harness（测试框架），指围绕被测系统搭建的一套自动化测试基础设施
Timeline (last 90 days)
Platform-level computing resources are typically pooled and managed via container orchestration (such as Kubernetes) and allocated dynamically according to task queues.
The official WeKnora documentation lists three deployment forms: production environment (containerized/K8s), learning environment (binary), and desktop application (not yet released).
Memory enforcement isolation solves the VRAM overrun problem, but does not solve the tail latency caused by multiple workloads contending for compute and bandwidth at the same time.
In GPU sharing schemes, merely placing multiple Pods on the same graphics card at the scheduling layer provides no real isolation at the memory level, and a single process may exhaust the entire card's memory and affect other tenants on the same card.
When using GPU sharing on Kubernetes, the scheduler's VRAM quota allocation and the runtime's actual execution must stay consistent, otherwise isolation fails.
Implementing VRAM quota scheduling on Kubernetes usually requires an additional resource reporting mechanism or a custom scheduler extension.
The GPU resource granularity of the Kubernetes Device Plugin is fixed at whole cards, and cannot express requests for half a card or a specific amount of VRAM.
A cluster-admin token can perform arbitrary operations on all resources in all namespaces within the cluster, including reading Secrets, creating Pods, and modifying RBAC policies.
A cluster-admin token is one of the highest-privilege credential types in container orchestration systems such as Kubernetes, and is typically bound to the cluster-admin ClusterRole.
OpenShell supports creating a sandbox with a single command and can run locally or on Kubernetes.
40 more timeline events
All Facts (20)
Go compiles to a single binary file with no complex runtime dependencies, making it easy to deploy quickly across various environments.
80%Verified容器技术（以Docker为代表）利用Linux内核的namespace机制实现进程、网络、文件系统隔离，借助cgroups限制CPU、内存等资源用量
80%VerifiedHarness Engineering概念源自软件测试领域的Test Harness（测试框架），指围绕被测系统搭建的一套自动化测试基础设施
80%VerifiedOPA (Open Policy Agent) is a general-purpose policy engine commonly used to centrally manage permissions, access control, and compliance policies at the application layer.
75%VerifiedNVIDIA Device Plugin registers the nvidia.com/gpu resource type with the Kubernetes scheduler, enabling Pods to declare GPU requirements via resources.limits.
75%VerifiedKubernetes was open-sourced by Google in 2014 and has become the de facto standard for container orchestration.
75%VerifiedBoth Kubernetes and TensorFlow adopt the Apache 2.0 open-source license.
70%VerifiedYAML has become the de facto standard configuration language in the DevOps domain and is widely adopted by Kubernetes, Ansible, and GitHub Actions.
70%VerifiedKata Containers combines the hardware isolation of lightweight virtual machines with the ease of use of the OCI container standard.
65%VerifiedThe OCI standard in the containerization field allows Docker containers to run on any compatible runtime, and Kubernetes' CRI allows different container runtimes to be interchangeable.
65%VerifiedKubernetes is a container orchestration platform open-sourced by Google and has become the de facto standard for cloud-native deployment; its HPA can dynamically scale inference instances up or down based on request queue length.
65%VerifiedKubernetes adopts a control plane and data plane separation architecture, including etcd for storing desired state, API Server as the entry point for state changes, Controller Manager running control loops, and Scheduler for scheduling Pods.
65%VerifiedCEL (Common Expression Language) is a lightweight expression language developed by Google, commonly used in policy rules and data validation scenarios.
65%VerifiedThe three basic Kubernetes Service types are ClusterIP, NodePort, and LoadBalancer.
65%VerifiedKubernetes's NodePort mode forwards external traffic to Pods inside the cluster by opening a fixed port (in the range 30000–32767) on every node in the cluster.
65%VerifiedQuarkus is a new-generation cloud-native Java framework led by Red Hat, designed specifically for containerized and Kubernetes environments
65%VerifiedSAP AI Core is an AI infrastructure service within SAP Business Technology Platform (BTP), built on Kubernetes.
65%VerifiedK9S is a widely popular open-source terminal UI tool for managing and observing Kubernetes clusters, known for its Vim-style keyboard operations.
65%UnverifiedPrometheus最初由SoundCloud开发，2016年成为继Kubernetes之后第二个加入CNCF的毕业项目
90%UnverifiedGoogle于2014年开源Kubernetes时选择了Go语言
90%