ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 26 Packages Projects Releases Wiki Activity

doc: update readme

Browse Source
This commit is contained in:
Stefan Reimer 2022-05-03 15:58:03 +02:00
parent 9241990d94
commit 63ec51d602
1 changed files with 17 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
README.md
View File

@ -5,6 +5,7 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
# Design philosophy # Design philosophy
- Cloud provider agnostic, bare-metal/self-hosted - Cloud provider agnostic, bare-metal/self-hosted
- Focus on security and simplicity before feature bloat
- No vendor lock in, most components are optional and could be exchanged - No vendor lock in, most components are optional and could be exchanged
- Organic Open Source / open and permissive licenses over closed-source solutions - Organic Open Source / open and permissive licenses over closed-source solutions
- No premium services / subscriptions required - No premium services / subscriptions required
@ -24,22 +25,29 @@ KubeZero is distributed as a collection of versioned Helm charts, allowing custo
| KubeZero Version | Kubernetes Version | EOL | | KubeZero Version | Kubernetes Version | EOL |
|------------------|---------------------|-------------| |------------------|---------------------|-------------|
| v1.22.X-Y | v1.22.X | 30 Sep 2022 | | v1.23.X-Y | v1.23.X | Alpha |
| v1.22.8-Y | v1.22.8 | 30 Sep 2022 |
| v1.21.9-Y | v1.21.9 | 31 May 2022 | | v1.21.9-Y | v1.21.9 | 31 May 2022 |
| v1.20.8 | v1.20 | Feb 2022 | | v1.20.8 | v1.20 | Feb 2022 |
| v1.19 | v1.19 | Jul 2021 | | v1.19 | v1.19 | Jul 2021 |
| v1.18 | v1.18 | Apr 2021 | | v1.18 | v1.18 | Apr 2021 |
| v1.17 | v1.17 | Jan 2021 |
| v1.16 | v1.16 | Nov 2020 |
[Upstream release policy](https://kubernetes.io/releases/) [Upstream release policy](https://kubernetes.io/releases/)
# Components # Components
## OS
- all nodes are based on Alpine V3.15
- 2 GB encrypted root filesystem
- no 3rd party dependencies at boot ( other than container registries )
- minimal attack surface
- extremely small memory footprint / overhead
## Container runtime ## Container runtime
- cri-o rather than Docker for improved security and performance - cri-o rather than Docker for improved security and performance
## Control plane ## Control plane
- all Kubernetes components compiled against Alpine OS using `buildmode=pie`
- support for single node control plane for small clusters / test environments to reduce costs - support for single node control plane for small clusters / test environments to reduce costs
- access to control plane from within the VPC only by default ( VPN access required for Admin tasks ) - access to control plane from within the VPC only by default ( VPN access required for Admin tasks )
- controller nodes are used for various platform admin controllers / operators to reduce costs and noise on worker nodes - controller nodes are used for various platform admin controllers / operators to reduce costs and noise on worker nodes
@ -55,6 +63,7 @@ KubeZero is distributed as a collection of versioned Helm charts, allowing custo
- all IAM roles are maintained via CloudBender automation - all IAM roles are maintained via CloudBender automation
- aws-node-termination handler integrated - aws-node-termination handler integrated
- support for spot instances per worker group incl. early draining etc. - support for spot instances per worker group incl. early draining etc.
- support for [Inf1 instances](https://aws.amazon.com/ec2/instance-types/inf1/) part of [AWS Neuron](https://aws.amazon.com/machine-learning/neuron/).
## Network ## Network
- Multus support for multiple network interfaces per pod, eg. additional AWS CNI - Multus support for multiple network interfaces per pod, eg. additional AWS CNI
@ -71,11 +80,11 @@ allows flexible / more containers per worker node compared to eg. AWS VPC CNI
## Ingress ## Ingress
- AWS Network Loadbalancer and Istio Ingress controllers - AWS Network Loadbalancer and Istio Ingress controllers
- optional rate limiting support - no additional costs per exposed service
- No additional costs per exposed service - real client source IP available to workloads via HTTP header and access logs
- Automated SSL Certificate handling via cert-manager incl. renewal etc. - ACME SSL Certificate handling via cert-manager incl. renewal etc.
- support for TCP services - support for TCP services
- Client source IP available to workloads via HTTP header - optional rate limiting support
- optional full service mesh - optional full service mesh
## Metrics ## Metrics