ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 25 Packages Projects Releases Wiki Activity

Update README

Browse Source
This commit is contained in:
Stefan Reimer 2021-10-21 15:24:52 +02:00
parent e824cd01d3
commit 794ca70ed9
1 changed files with 22 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
README.md
View File

@ -12,17 +12,19 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
# Version / Support Matrix
KubeZero releases track the same *minor* version of Kubernetes.
Any 1.20.X-Y release of Kubezero supports any Kubernetes cluster 1.20.X.
| KubeZero \ Kubernetes Version | v1.19 | v1.20 | v1.21 | EOL |
|----------------------------------------|-------|-------|-------|-------------|
| master branch | no | yes | alpha | |
| stable branch | no | yes | no | |
| v2.20.0 | no | yes | no | 30 Oct 2021 |
| v2.19.0 | yes | no | no | 30 Aug 2021 |
KubeZero is distributed as a collection of versioned Helm charts, allowing custom upgrade schedules and module versions as needed.
| KubeZero Version | Kubernetes Version | EOL |
|------------------|---------------------|-------------|
| v1.20.8 | v1.20 | 30 Nov 2021 |
| v1.21.0 | v1.21 | 28 Feb 2022 |
[Upstream release policy](https://kubernetes.io/releases/)
# Architecure
# Architecture
![aws_architecture](docs/aws_architecture.png)
@ -39,22 +41,21 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
## GitOps
- full ArgoCD support and integration (optional)
## AWS IAM access control
- Kiam allowing IAM roles per pod
- IAM roles are assumed / requested and cached on controller nodes for improved security
- access to meta-data services is blocked / controlled on all nodes
- core IAM roles are maintained via CFN templates
## AWS integrations
- IAM roles for service accounts allowing each pod to assume individual IAM roles
- access to meta-data services is blocked all workload containers on all nodes
- system IAM roles are maintained via CloudBender automation
## Network
- Calico using VxLAN incl. increased MTU
- allows way more containers per worker
- allows flexible / more containers per worker node compated to eg. AWS VPC CNI
- isolates container traffic from VPC by using VxLAN overlay
- no restrictions on IP space / sizing from the underlying VPC architecture
## Storage
- flexible EBS support incl. zone awareness
- EFS support via automated EFS provisioning for worker groups via CFN templates
- local storage provider for latency sensitive high performance workloads
- EFS support via automated EFS provisioning for worker groups via CloudBender automation
- local storage provider (OpenEBS LVM) for latency sensitive high performance workloads
## Ingress
- AWS Network Loadbalancer and Istio Ingress controllers
@ -67,12 +68,13 @@ KubeZero is a Kubernetes distribution providing an integrated container platform
## Metrics
- Prometheus support for all components
- automated service discovery allowing instant access to common workload metrics
- Preconfigured community maintained Grafana dashboards for common services
- Preconfigured community maintained Alerts
- Various pre-configured Grafana dashboards for common services
- Various pre-configured Alerts
- Alerts can be send via SNSAlertHub to eg. Slack, Goole, Matrix, etc.
## Logging
- all container logs are enhanced with Kubernetes metadata to provide context for each message
- all container logs are enhanced with Kubernetes and AWS metadata to provide context for each message
- flexible ElasticSearch setup, leveraging the ECK operator, for easy maintenance & minimal admin knowledge required, incl. automated backups to S3
- Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management
- central fluentd service providing queuing during highload as well as additional parsing options
- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via SSL to fluentd
- [fluentd-concerter](https://git.zero-downtime.net/ZeroDownTime/container-park/src/branch/master/fluentd-concenter) service providing queuing during highload as well as additional parsing options
- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via TLS to fluentd-concenter