kubeadm-ha - Kubernetes high availiability deploy based on kubeadm (for v1

•    Smarty

---

kube-apiserver: exposes the Kubernetes API. It is the front-end for the Kubernetes control plane. It is designed to scale horizontally – that is, it scales by deploying more instances. etcd: is used as Kubernetes’ backing store. All cluster data is stored here. Always have a backup plan for etcd’s data for your Kubernetes cluster. kube-scheduler: watches newly created pods that have no node assigned, and selects a node for them to run on. kube-controller-manager: runs controllers, which are the background threads that handle routine tasks in the cluster. Logically, each controller is a separate process, but to reduce complexity, they are all compiled into a single binary and run in a single process. kubelet: is the primary node agent. It watches for pods that have been assigned to its node (either by apiserver or via local configuration file) kube-proxy: enables the Kubernetes service abstraction by maintaining network rules on the host and performing connection forwarding. keepalived cluster config a virtual IP address (192.168.20.10), this virtual IP address point to k8s-master01, k8s-master02, k8s-master03. nginx service as the load balancer of k8s-master01, k8s-master02, k8s-master03's apiserver. The other nodes kubernetes services connect the keepalived virtual ip address (192.168.20.10) and nginx exposed port (16443) to communicate with the master cluster's apiservers.

kubernetes kubeadm ha high-availability cluster nginx keepalived

kubeadm-dind-cluster - A Kubernetes multi-node test cluster based on kubeadm

•    Shell

---

A Kubernetes multi-node cluster for developer of Kubernetes and projects that extend Kubernetes. Based on kubeadm and DIND (Docker in Docker). Supports both local workflows and workflows utilizing powerful remote machines/cloud instances for building Kubernetes, starting test clusters and running e2e tests.

kubernetes kubeadm dind k8s k8s-sig-cluster-lifecycle

cf-for-k8s - The open source deployment manifest for Cloud Foundry on Kubernetes

•    Shell

---

Cloud Foundry For Kubernetes (cf-for-k8s) blends the popular CF developer API with Kubernetes, Istio, and other open source technologies. The project aims to improve developer productivity for organizations using Kubernetes. cf-for-k8s can be installed atop any conformant environment in minutes. If you're new to Kubernetes, we recommend this Getting Started Guide, which walks you though deploying cf-for-k8s on your machine using a local kind (Kubernetes In Docker) cluster. The guide configures your cf-for-k8s deployment as a developer-edition that runs on your laptop and can handle approximately 10 small applications.

BotKube - Messaging bot for monitoring and debugging Kubernetes clusters

•    Go

---

BotKube integration with Slack, Mattermost or Microsoft Teams helps you monitor your Kubernetes cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask BotKube to execute kubectl commands on k8s cluster which helps debugging an application or cluster.

kubernetes kubernetes-monitoring kubernetes-controller chatops botops chatbot kubebot botkube bot kubernetes-bot

kURL - Production-grade, airgapped Kubernetes installer combining upstream k8s with overlays and popular components

•    Shell

---

kURL is a Kubernetes installer for airgapped and online clusters. kURL relies on kubeadm to bring up the Kubernetes control plane, but there are a variety of tasks a system administrator must perform both before and after running kubeadm init in order to have a production-ready Kubernetes cluster, such as installing Docker, configuring Pod networking, or installing kubeadm itself. The purpose of this installer is to automate those tasks so that any user can deploy a Kubernetes cluster with a single script.

bash kubernetes kubernetes-cluster ceph kubeadm rook contour kubernetes-installation airgapped kurl kubernetes-installer

aws-eks-base - This boilerplate contains the know-how of the Mad Devs team for the rapid deployment of a Kubernetes cluster, supporting services, and the underlying infrastructure in the Amazon cloud

•    HCL

---

This repository contains the know-how of the Mad Devs team for the rapid deployment of a Kubernetes cluster, supporting services, and the underlying infrastructure in the Amazon cloud. The main development and delivery tool is terraform. In our company’s work, we have tried many infrastructure solutions and services and traveled the path from on-premise hardware to serverless. As of today, Kubernetes has become our standard platform for deploying applications, and AWS has become the main cloud.

kubernetes infrastructure aws boilerplate terraform k8s-cluster hashicorp-terraform terraform-module terraform-files amazon-eks eks-cluster kubernetes-clusters terraform-module-manager serverless-kubernetes-cluster

Cilium - eBPF-based Networking, Security, and Observability

•    Go

---

Cilium is open source software for providing and transparently securing network connectivity and loadbalancing between application workloads such as application containers or processes. Cilium operates at Layer 3/4 to provide traditional networking and security services as well as Layer 7 to protect and secure use of modern application protocols such as HTTP, gRPC and Kafka. Cilium is integrated into common orchestration frameworks such as Kubernetes.

kubernetes security networking monitoring kernel containers k8s ebpf xdp troubleshooting observability cni loadbalancing bpf kubernetes-networking load-balancer

aws-iam-authenticator - A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

•    Go

---

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project recieves contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS Engineers. If you are an administrator running a Kubernetes cluster on AWS, you already need to manage AWS IAM credentials to provision and update the cluster. By using AWS IAM Authenticator for Kubernetes, you avoid having to manage a separate credential for Kubernetes access. AWS IAM also provides a number of nice properties such as an out of band audit trail (via CloudTrail) and 2FA/MFA enforcement.

kubernetes iam aws auth k8s-sig-aws

kube-scan - kube-scan: Octarine k8s cluster risk assessment tool

•    Go

---

Try our free Kubernetes risk assessment tool today. Run it on any cluster at any time. No data leaves your cluster. We do not collect any information. For more information on Octarine see https://www.octarinesec.com. Kube-Scan gives a risk score, from 0 (no risk) to 10 (high risk) for each workload. The risk is based on the runtime configuration of each workload (currently 20+ settings). The exact rules and scoring formula are part of the open-source framework KCCSS, the Kubernetes Common Configuration Scoring System.

kubernetes security devops security-audit k8s cloud-native security-scanner security-tools devsecops security-scanners

kismatic - Kismatic Enterprise Toolkit: Fully-Automated, Production-Grade Kubernetes Operations

•    Go

---

Installation Overview -- Instructions on using KET to install a Kubernetes cluster.Upgrading Your Cluster -- Instructions on using KET to upgrade your Kubernetes cluster.

kubernetes ket kubernetes-cluster installing-kubernetes containers kubernetes-management deployment

cluster-api - Home for the Cluster Management API work, a subproject of sig-cluster-lifecycle

•    Go

---

The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management. It provides optional, additive functionality on top of core Kubernetes. Note that Cluster API effort is still in the prototype stage while we get feedback on the API types themselves. All of the code here is to experiment with the API and demo its abilities, in order to drive more technical feedback to the API design. Because of this, all of the prototype code is rapidly changing.

k8s-sig-cluster-lifecycle

k8s-on-raspbian - Kubernetes on Raspbian (Raspberry Pi)

•    Shell

---

This guide is part of a larger blog post: Build your own bare-metal ARM cluster. Once you're up and running please share your clusters on Twitter with @alexellisuk.

kubernetes kubernetes-cluster k8s devops cka ckad serverless faas cloud bare-metal raspberry-pi

choerodon - The open source PaaS for Kubernetes.

•    

---

Choerodon is an open source enterprise service platform based on container orchestration and management capabilities of Kubernetes. It integrates the tool chain of DevOps, microservices, and mobile application framework to help companies achieve Scrum application delivery and automated operations management, and provide business components such as IoT, payment, data, smart insight, and enterprise application market to help companies focus on business and accelerate digital transformation. A comprehensive tool chain supporting DevOps best practices, supporting Scrum management from planning, programming, building, testing, publishing, and operations.

kubernetes paas k8s containers microservices-application enterprise choerodon

containerdns - a full cache DNS for kubernetes

•    C

---

ContainerDNS is used as internal DNS server for k8s cluster, and use DNS library : https://github.com/miekg/dns. containerdns-kubeapi will monitor the services in k8s cluster,when the service is created and has been assigned with external ips, the user(docker)in cluster can access the service with the domain. When the domain has multiple ips, the containerdns will choose one actived for the user randomly, it seems like a load balancer. Also the containerdns offer "session persistence", that means we query one domain from one user ip, then the user access the domain later, the user will get the same service ip.

kubernetes dns docker jdos etcd dpdk

external-dns - Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services

•    Go

---

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers. Inspired by Kubernetes DNS, Kubernetes' cluster-internal DNS server, ExternalDNS makes Kubernetes resources discoverable via public DNS servers. Like KubeDNS, it retrieves a list of resources (Services, Ingresses, etc.) from the Kubernetes API to determine a desired list of DNS records. Unlike KubeDNS, however, it's not a DNS server itself, but merely configures other DNS providers accordingly—e.g. AWS Route 53 or Google Cloud DNS.

dns kubernetes route53 aws ingress gcp dns-record clouddns external-dns k8s-sig-network dns-providers dns-servers dns-controller

secrets-store-csi-driver - Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume

•    Go

---

Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a Container Storage Interface (CSI) volume. The Secrets Store CSI driver secrets-store.csi.k8s.io allows Kubernetes to mount multiple secrets, keys, and certs stored in enterprise-grade external secrets stores into their pods as a volume. Once the Volume is attached, the data in it is mounted into the container's file system.

kubernetes hashicorp-vault csi azure-keyvault aws-secrets-manager k8s-sig-auth gcp-secret-manager csi-secrets-store mount-multiple-secrets

zero-to-jupyterhub-k8s - Resources for deploying JupyterHub to a Kubernetes Cluster

•    Python

---

This is under active development and subject to change. This repo contains resources, such as Helm charts and the Zero to JupyterHub Guide, which help you to deploy JupyterHub on Kubernetes.

jupyterhub jupyter-notebook jupyter kubernetes kubernetes-cluster kubespawner jupyterhub-deployment

kubespray - Deploy a Production Ready Kubernetes Cluster

•    Python

---

probably pointing on a task depending on a module present in requirements.txt (i.e. "unseal vault"). One way of solving this would be to uninstall the Ansible package and then, to install it via pip but it is not always possible. A workaround consists of setting ANSIBLE_LIBRARY and ANSIBLE_MODULE_UTILS environment variables respectively to the ansible/modules and ansible/module_utils subdirectories of pip packages installation location, which can be found in the Location field of the output of pip show [package] before executing ansible-playbook.

kubernetes-cluster ansible kubernetes high-availability bare-metal gce aws kubespray k8s-sig-cluster-lifecycle

kubefed - Kubernetes Cluster Federation

•    Go

---

Kubernetes Cluster Federation (KubeFed for short) allows you to coordinate the configuration of multiple Kubernetes clusters from a single set of APIs in a hosting cluster. KubeFed aims to provide mechanisms for expressing which clusters should have their configuration managed and what that configuration should be. The mechanisms that KubeFed provides are intentionally low-level, and intended to be foundational for more complex multicluster use cases such as deploying multi-geo applications and disaster recovery. KubeFed is currently beta.

hacktoberfest k8s-sig-multicluster federated-clusters

wayne - Web UI for Kubernetes multi-clusters

•    TypeScript

---

Wayne is a universal, web-based Kubernetes multi-cluster management platform. It reduces service access costs by visualizing Kubernetes object template editing. With a complete permission management system and adapting to multi-tenant scenarios, it is a publish platform suitable for enterprise-level clusters. Wayne has been serving 360 search on a large scale, carrying most of the online services, stably managing nearly a thousand applications, tens of thousands of containers, running for more than two years, withstood the test of production.

docker kubernetes kubernetes-cluster wayne