README updates
This commit is contained in:
parent
fc45e7fd0b
commit
19d10828f6
27
README.md
27
README.md
@ -1,17 +1,16 @@
|
|||||||
KubeZero - Zero Down Time Kubernetes platform
|
KubeZero - Zero Down Time Kubernetes platform
|
||||||
========================
|
========================
|
||||||
KubeZero is a pre-configured collection of components deployed onto a bare Kubernetes cluster.
|
KubeZero is a Kubernetes distribution providing an opinionated, pre-configured container platform
|
||||||
All chosen components are 100% organic OpenSource.
|
incl. various addons and services.
|
||||||
|
|
||||||
# Design goals
|
# Design goals
|
||||||
|
|
||||||
- Cloud provider agnostic, bare-metal / self-hosted possible
|
- Cloud provider agnostic, bare-metal / self-hosted possible
|
||||||
- No vendor lock in
|
- No vendor lock in, most components are optional and could be exchanged
|
||||||
- No closed source solutions
|
- Organic OpenSource / open and permissive licenses over closed-source solutions
|
||||||
- No premium services / subscriptions required
|
- No premium services / subscriptions required
|
||||||
- Staying to upstream projects as close as possible
|
- Staying and contributing back to upstream projects as much as possible
|
||||||
- Minimal custom code
|
|
||||||
- Work within each community / give back
|
|
||||||
|
|
||||||
# Version / Support Matrix
|
# Version / Support Matrix
|
||||||
|
|
||||||
@ -31,13 +30,15 @@ All chosen components are 100% organic OpenSource.
|
|||||||
- support for single node control plane for small clusters / test environments to reduce costs
|
- support for single node control plane for small clusters / test environments to reduce costs
|
||||||
- access to control plane from within the VPC only by default ( VPN access required for Admin tasks )
|
- access to control plane from within the VPC only by default ( VPN access required for Admin tasks )
|
||||||
- controller nodes are used for various platform admin controllers / operators to reduce costs and noise on worker nodes
|
- controller nodes are used for various platform admin controllers / operators to reduce costs and noise on worker nodes
|
||||||
- integrated ArgoCD Gitops controller
|
|
||||||
|
## GitOps
|
||||||
|
- full ArgoCD support and integration (optional)
|
||||||
|
|
||||||
## AWS IAM access control
|
## AWS IAM access control
|
||||||
- Kiam allowing IAM roles per pod
|
- Kiam allowing IAM roles per pod
|
||||||
- IAM roles are assumed / requested and cached on controller nodes for improved security
|
- IAM roles are assumed / requested and cached on controller nodes for improved security
|
||||||
- blocking access to meta-data service on all nodes
|
- access to meta-data services is blocked / controlled on all nodes
|
||||||
- IAM roles are maintained/ automated and tracked via CFN templates
|
- core IAM roles are maintained via CFN templates
|
||||||
|
|
||||||
## Network
|
## Network
|
||||||
- Calico using VxLAN incl. increased MTU
|
- Calico using VxLAN incl. increased MTU
|
||||||
@ -66,7 +67,7 @@ All chosen components are 100% organic OpenSource.
|
|||||||
|
|
||||||
## Logging
|
## Logging
|
||||||
- all container logs are enhanced with Kubernetes metadata to provide context for each message
|
- all container logs are enhanced with Kubernetes metadata to provide context for each message
|
||||||
- flexible ElasticSearch setup via ECK operator to ease maintenance and reduce required admin knowledge, incl automated backups to S3
|
- flexible ElasticSearch setup, leveraging the ECK operator, for easy maintenance & minimal admin knowledge required, incl. automated backups to S3
|
||||||
- Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management to reduce costs
|
- Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management
|
||||||
- fluentd central log ingress service allowing additional parsing and queuing to improved reliability
|
- central fluentd service providing queuing during highload as well as additional parsing options
|
||||||
- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via SSL to fluentd
|
- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via SSL to fluentd
|
||||||
|
@ -116,7 +116,7 @@ spec:
|
|||||||
|
|
||||||
containers:
|
containers:
|
||||||
- name: aws-iam-authenticator
|
- name: aws-iam-authenticator
|
||||||
image: public.ecr.aws/x8h8t2o1/aws-iam-authenticator:v0.5.2
|
image: public.ecr.aws/zero-downtime/aws-iam-authenticator:v0.5.2
|
||||||
args:
|
args:
|
||||||
- server
|
- server
|
||||||
- --backend-mode=CRD,MountedFile
|
- --backend-mode=CRD,MountedFile
|
||||||
|
Loading…
Reference in New Issue
Block a user