ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 25 Packages Projects Releases Wiki Activity

Update README

Browse Source
This commit is contained in:
Stefan Reimer 2021-10-21 15:24:52 +02:00
parent e824cd01d3
commit 794ca70ed9
1 changed files with 22 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
README.md
View File

@ -12,17 +12,19 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
# Version / Support Matrix # Version / Support Matrix
KubeZero releases track the same *minor* version of Kubernetes.
Any 1.20.X-Y release of Kubezero supports any Kubernetes cluster 1.20.X.
| KubeZero \ Kubernetes Version | v1.19 | v1.20 | v1.21 | EOL | KubeZero is distributed as a collection of versioned Helm charts, allowing custom upgrade schedules and module versions as needed.
|----------------------------------------|-------|-------|-------|-------------|
| master branch | no | yes | alpha | | | KubeZero Version | Kubernetes Version | EOL |
| stable branch | no | yes | no | | |------------------|---------------------|-------------|
| v2.20.0 | no | yes | no | 30 Oct 2021 | | v1.20.8 | v1.20 | 30 Nov 2021 |
| v2.19.0 | yes | no | no | 30 Aug 2021 | | v1.21.0 | v1.21 | 28 Feb 2022 |
[Upstream release policy](https://kubernetes.io/releases/) [Upstream release policy](https://kubernetes.io/releases/)
# Architecure # Architecture
![aws_architecture](docs/aws_architecture.png) ![aws_architecture](docs/aws_architecture.png)
@ -39,22 +41,21 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
## GitOps ## GitOps
- full ArgoCD support and integration (optional) - full ArgoCD support and integration (optional)
## AWS IAM access control ## AWS integrations
- Kiam allowing IAM roles per pod - IAM roles for service accounts allowing each pod to assume individual IAM roles
- IAM roles are assumed / requested and cached on controller nodes for improved security - access to meta-data services is blocked all workload containers on all nodes
- access to meta-data services is blocked / controlled on all nodes - system IAM roles are maintained via CloudBender automation
- core IAM roles are maintained via CFN templates
## Network ## Network
- Calico using VxLAN incl. increased MTU - Calico using VxLAN incl. increased MTU
- allows way more containers per worker - allows flexible / more containers per worker node compated to eg. AWS VPC CNI
- isolates container traffic from VPC by using VxLAN overlay - isolates container traffic from VPC by using VxLAN overlay
- no restrictions on IP space / sizing from the underlying VPC architecture - no restrictions on IP space / sizing from the underlying VPC architecture
## Storage ## Storage
- flexible EBS support incl. zone awareness - flexible EBS support incl. zone awareness
- EFS support via automated EFS provisioning for worker groups via CFN templates - EFS support via automated EFS provisioning for worker groups via CloudBender automation
- local storage provider for latency sensitive high performance workloads - local storage provider (OpenEBS LVM) for latency sensitive high performance workloads
## Ingress ## Ingress
- AWS Network Loadbalancer and Istio Ingress controllers - AWS Network Loadbalancer and Istio Ingress controllers
@ -67,12 +68,13 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
## Metrics ## Metrics
- Prometheus support for all components - Prometheus support for all components
- automated service discovery allowing instant access to common workload metrics - automated service discovery allowing instant access to common workload metrics
- Preconfigured community maintained Grafana dashboards for common services - Various pre-configured Grafana dashboards for common services
- Preconfigured community maintained Alerts - Various pre-configured Alerts
- Alerts can be send via SNSAlertHub to eg. Slack, Goole, Matrix, etc.
## Logging ## Logging
- all container logs are enhanced with Kubernetes metadata to provide context for each message - all container logs are enhanced with Kubernetes and AWS metadata to provide context for each message
- flexible ElasticSearch setup, leveraging the ECK operator, for easy maintenance & minimal admin knowledge required, incl. automated backups to S3 - flexible ElasticSearch setup, leveraging the ECK operator, for easy maintenance & minimal admin knowledge required, incl. automated backups to S3
- Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management - Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management
- central fluentd service providing queuing during highload as well as additional parsing options - [fluentd-concerter](https://git.zero-downtime.net/ZeroDownTime/container-park/src/branch/master/fluentd-concenter) service providing queuing during highload as well as additional parsing options
- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via SSL to fluentd - lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via TLS to fluentd-concenter