1. Decoupling the Engine to Unlock Pipeline Capabilities When designing a system, we often face a dilemma. Do we contain the complexity and offer a single, easy-to-use capability to the outside; or do we release the complexity and return flexibility to the user? This is a real test of product

1. Network Isolation in Kubernetes Kubernetes introduced Network Policy in 1.3. It defines entities through ipBlock, podSelector, and namespaceSelector, and controls their From (Ingress) and To (Egress) traffic behavior. But Kubernetes only defines the network policy; the actual implementation depends on the network plugin. Today, network plugins such as Calico, Cilium, and Weave Net all support network isolation.

1. My Experience Building Platforms After graduation I joined Tencent BlueKing, mainly working on SaaS development. After nearly three years there, I went back to my hometown of Wuhan and joined QingCloud, where I was responsible for DevOps R&D. After nearly two years, I joined a new company, took part in building a business support platform, and thought about how the business side puts Kubernetes into practice.

For well-known reasons, accessing Github from a network environment in China is either blocked or very slow. This article provides several ways to get around it. 1. Download Using a Github Mirror Just prepend a Proxy address to the GitHub repository; the way different Mirrors are concatenated may vary. The

Below is a list comparing Jenkins and Tekton: Feature Jenkins Tekton Programming language Java Golang Language for developing plugins Java Shell, Yaml Pipeline description language Groovy, Shell Yaml, Shell Plugin ecosystem Many plugins, LDAP, GitLab Lacking Number of plugins 1500+ 100+ Compatibility between plugins May conflict, cannot be upgraded freely Fully compatible Secondary development Wrapping the API Composing Tasks High availability Integrates Gearman, master-slave mode Relies on Kubernetes’ high availability Concurrent build scale per instance A few hundred concurrent builds Relies on Kubernetes’ Pod management capability, so it can be very large Data storage Local disk Etcd Supports automatic triggering Yes Yes Has commercial support No No