Pod 作为执行单元而非代理：重新思考 Kubernetes 上 AI 代理的部署
原标题：Pods as Workers, Not Agents: Rethinking the Deployment Unit for AI Agents on Kubernetes
AI 摘要
CNCF 博客文章中，Lin Sun 基于 kagent 项目经验，提出在 Kubernetes 上部署 AI 代理时，Pod 适合作为执行单元，但不再是部署、身份或生命周期单元。文章对比了两种方法：一是为每个代理分配独立 Pod，二是引入 Agent Substrate 控制平面，将代理作为逻辑 Actor 调度到 Worker 上。该方案通过固定 Pod 池支持更多逻辑代理，并影响身份、访问控制、可观测性等设计。
正文节选
In a CNCF blog post, Lin Sun draws on work in the kagent project to argue that the Pod may be the right execution unit for an agent while no longer being the right deployment, identity, or lifecycle unit. The questions that surface once agent counts grow are familiar: how to isolate one agent from another, how each gets its own identity, how to enforce access and network policies, how to see what an individual agent is doing, and who owns an agent for multi-tenancy. These are agent platform ques