ThoughtWorks 技术雷达 Vol.35 摘要
ThoughtWorks 技术雷达第 35 期（2026 年 11 月）中文摘要：四大主题、117 个条目与团队行动建议。
Topic
#kubernetes
23 篇笔记
The new set of problems for engineers to solve
A lot of software engineers are going through what can only be described as an identity crisis. The job has changed a lot. Some are depresse...
Kubernetes GPU Guide 2026: Scheduling, Sharing, Monitoring
Run GPUs on Kubernetes in 2026: install the NVIDIA GPU Operator, share GPUs with MIG or time-slicing, serve LLMs with vLLM, and monitor with DCGM.
AI Agents Are Having Their Kubernetes Moment
Ten years ago, we saw infrastructure responsibilities moving out of microservices and into Kubernetes, service meshes, and proxies. Applicat...
手脑分离与边界治理：企业级 Agent 平台的总体架构设计
在本地终端环境中，开发者早已习惯使用 Claude Code、Cursor 或各类命令行 Agent 进行自主编码与系统运维。模型推理循环与操作系统的 Shell、文件系统和环境变量运行在同一台宿主机上，通过本地进程树与内存字典直接驱动。这种“脑与手同机”的拓扑，在个人开发机上极...
AI Agent 沙箱怎么选？我们把 runc、vArmor 和 Kata 跑了 30 轮
在 104 线程 Linux 物理机上实测 runc、runc + vArmor 与 Kata QEMU：Kata 用近一倍启动时间和数百 MiB 内存换独立内核，vArmor 则以接近 runc 的成本收紧行为边界。
GPU 共享怎么选：KAI vs HAMi vs MIG
Kubernetes 上的 GPU 共享：KAI、HAMi 与 MIG 对比。
Kyverno is a platform primitive, not a security tool
Where does Kyverno live in your organization? I don’t mean which cluster! On which team’s slide deck does it show up? Whose budget line? For most companies I’ve…
Why your KubeVirt VMs can't move between clusters — and how EVPN fixes it
Migrate KubeVirt VMs between clusters seamlessly with EVPN/VXLAN overlays and OpenPERouter CRDs. No network tickets required.
nvml-mock
nvml-mock 📝 摘要 nvml-mock 是 NVIDIA 官方的 Kubernetes Helm Chart，通过 CGo 编译的 mock 共享库，在无物理 GPU 的集群中模拟完整的多 GPU 环境，使 、device plugin、DRA driver 等 GPU 相关 K8s 组件无需真实硬件即可运行和测试。它部署为 DaemonSet + ConfigMap + RBAC，在…
Agency: Secure, scalable sandboxes for agents
This is part of our series on how we're AI-pilling Sierra.In our last few posts, we talked about what happens when every employee has a sing...
Why Kubernetes is the wrong tool for agentic workloads
At some point, everyone building ai infra wonders whether they should use Kubernetes. There’s no straight answer for it because it depends o...
OpenEBS vs Longhorn 深度对比
OpenEBS vs Longhorn 深度对比 调研时间：2026-07-26 ｜ 数据来源：OpenEBS v4.5.x 官方文档 + Longhorn v1.12.0 官方文档 概览速查 | 维度 | OpenEBS | Longhorn | |---|---|---| | 定位 | CAS/CNS 容器原生存储，多引擎可选 | 轻量分布式块存储，每卷独立 Engine | | CNCF 状…
CSGHub cStor 存储故障排查报告
📝 摘要 本文记录了 CSGHub 集群一次由 OpenEBS cStor 3.6.0 存储故障引发的 Redis Pod CrashLoopBackOff 排查全过程，故障波及四个 CStorPoolInstance 全部进入只读状态。排查揭示三层根因：池容量达 82% 触发 cStor 硬编码的 85% 只读保护阈值（不可配置、不可自动解除）；清理容量后卷副本 rebuild 陷入状态机死锁…
Volcano 调度框架深度解读
Volcano 调度框架深度解读 调研日期: 2026-07-01 | 版本: v1.15.0 (2026-06) | 置信度: 全部 findings 经 3-vote 对抗验证，均 High confidence 官方站点: volcano.sh | GitHub: volcano-sh/volcano 一、项目概览与 CNCF 状态 Volcano 是 CNCF 孵化项目（2022-03-2…
AI INFRA 全景分析与展望
AI INFRA 全景分析与展望 深度调研日期：2026-06-24 | 来源：多源 Web 搜索 + 对抗验证（24 个搜索代理，15+ 源站，70+ 可验证 claims） 📐 全景架构定位图 ---|------| | 核心创新 | PagedAttention — OS 式虚拟内存分页管理 KV Cache，将显存碎片率从 40% 降至 ⚠️ 注意：vLLM 上游无法提供 day-0 R…
Engineering End-to-End Observability for Kubernetes Workloads
Stop drowning in Kubernetes dashboards. Learn how consistent signal architecture, not more tooling, is what actually cuts incident resolution time in half.
Launching a million sandboxes per second in constant time
They say that in the future, everyone will have their own sandbox company for 15 minutes. Let's make that simpler, here's exactly how I buil...
SkyPilot Sandboxes: Run Agent Code on Your Own Kubernetes, at Scale
SkyPilot runs untrusted, LLM-generated code in sandboxes on the Kubernetes clusters you already own. A single cluster sustains 50,000+ sandboxes, with multi-cluster support to go further. Individual launches in less than a second. All at up to one-tenth the cost of hosted alternatives, with your code and data never leaving your cloud.
一、整体架构
这次问题的核心现象是： 最终定位： OpenEBS 后端已经扩容成功，但 Linux device-mapper（multipath）层没有刷新容量，导致文件系统仍看到旧大小。 二、问题现象 PVC describe 看到： 但 events 中持续出现： 以及： 同时又有： 这是一个非常“矛盾”的状态。 --- 三、第一次误判 最开始以为： 因为： - external-resizer 持续 r…
Kubernetes 中 Alpine(musl) DNS 解析异常排查复盘
Open: Pasted image 20260513104709.png30-Resources/Clippings/2026/2026-05/assets/03a146e5af0e9e40f7dbae15116436eaMD5.jpg Kubernetes 中 Alpine(musl) DNS 解析异常排查复盘 问题现象 某个 Kubernetes Pod 中： 报错： 但： 能够正常解析：…
Kubernetes AI/ML 基础设施项目全景调研
Kubernetes AI/ML 基础设施项目全景调研 调研日期：2026-05-08 | 覆盖项目：Volcano、HAMi、Ray、LeaderWorkerSet、Kueue、KServe、Kubeflow、Seldon Core、vLLM、Triton、GPU Operator 等 二、核心项目热度总览 | 项目 | GitHub ⭐ | CNCF 状态 | 最新版本 | 核心定位 | |-…
Mount Mayhem at Netflix: Scaling Containers on Modern CPUs
Mount Mayhem at Netflix: Scaling Containers on Modern CPUs Authors: Harshad Sane, Andrew Halaney Imagine this — you click play on Netflix on a Friday night and behind the scenes hundreds of …