From 49c82e5a900ff886beba646b95163b6ac3ba45fd Mon Sep 17 00:00:00 2001 From: Stefan Reimer Date: Thu, 21 Oct 2021 15:24:52 +0200 Subject: [PATCH] Update README --- README.md | 42 ++++++++++++++++++++++-------------------- 1 file changed, 22 insertions(+), 20 deletions(-) diff --git a/README.md b/README.md index 03db4a6..33cdd6b 100644 --- a/README.md +++ b/README.md @@ -12,17 +12,19 @@ KubeZero is a Kubernetes distribution providing an integrated container platform # Version / Support Matrix +KubeZero releases track the same *minor* version of Kubernetes. +Any 1.20.X-Y release of Kubezero supports any Kubernetes cluster 1.20.X. -| KubeZero \ Kubernetes Version | v1.19 | v1.20 | v1.21 | EOL | -|----------------------------------------|-------|-------|-------|-------------| -| master branch | no | yes | alpha | | -| stable branch | no | yes | no | | -| v2.20.0 | no | yes | no | 30 Oct 2021 | -| v2.19.0 | yes | no | no | 30 Aug 2021 | +KubeZero is distributed as a collection of versioned Helm charts, allowing custom upgrade schedules and module versions as needed. + +| KubeZero Version | Kubernetes Version | EOL | +|------------------|---------------------|-------------| +| v1.20.8 | v1.20 | 30 Nov 2021 | +| v1.21.0 | v1.21 | 28 Feb 2022 | [Upstream release policy](https://kubernetes.io/releases/) -# Architecure +# Architecture ![aws_architecture](docs/aws_architecture.png) @@ -39,22 +41,21 @@ KubeZero is a Kubernetes distribution providing an integrated container platform ## GitOps - full ArgoCD support and integration (optional) -## AWS IAM access control -- Kiam allowing IAM roles per pod -- IAM roles are assumed / requested and cached on controller nodes for improved security -- access to meta-data services is blocked / controlled on all nodes -- core IAM roles are maintained via CFN templates +## AWS integrations +- IAM roles for service accounts allowing each pod to assume individual IAM roles +- access to meta-data services is blocked all workload containers on all nodes +- system IAM roles are maintained via CloudBender automation ## Network - Calico using VxLAN incl. increased MTU -- allows way more containers per worker +- allows flexible / more containers per worker node compated to eg. AWS VPC CNI - isolates container traffic from VPC by using VxLAN overlay - no restrictions on IP space / sizing from the underlying VPC architecture ## Storage - flexible EBS support incl. zone awareness -- EFS support via automated EFS provisioning for worker groups via CFN templates -- local storage provider for latency sensitive high performance workloads +- EFS support via automated EFS provisioning for worker groups via CloudBender automation +- local storage provider (OpenEBS LVM) for latency sensitive high performance workloads ## Ingress - AWS Network Loadbalancer and Istio Ingress controllers @@ -67,12 +68,13 @@ KubeZero is a Kubernetes distribution providing an integrated container platform ## Metrics - Prometheus support for all components - automated service discovery allowing instant access to common workload metrics -- Preconfigured community maintained Grafana dashboards for common services -- Preconfigured community maintained Alerts +- Various pre-configured Grafana dashboards for common services +- Various pre-configured Alerts +- Alerts can be send via SNSAlertHub to eg. Slack, Goole, Matrix, etc. ## Logging -- all container logs are enhanced with Kubernetes metadata to provide context for each message +- all container logs are enhanced with Kubernetes and AWS metadata to provide context for each message - flexible ElasticSearch setup, leveraging the ECK operator, for easy maintenance & minimal admin knowledge required, incl. automated backups to S3 - Kibana allowing easy search and dashboards for all logs, incl. pre configured index templates and index management -- central fluentd service providing queuing during highload as well as additional parsing options -- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via SSL to fluentd +- [fluentd-concerter](https://git.zero-downtime.net/ZeroDownTime/container-park/src/branch/master/fluentd-concenter) service providing queuing during highload as well as additional parsing options +- lightweight fluent-bit agents on each node requiring minimal resources forwarding logs secure via TLS to fluentd-concenter