Kubernetes is hard--or is it? This repo is a collection of images and container resource definitions for managing a software-dev organization using Kubernetes with tools to make it easier. Contents:
Directory | Description |
---|---|
ansible | build your own cluster (Kubernetes or Swarm) |
images | images which are published to Docker Hub |
k8s | container resources in kubernetes yaml format |
lib/build | build makefile and tools |
services | non-clustered docker-compose services |
ssl | PKI certificate tools (deprecated by k8s) |
stacks | container resources in docker-compose format |
Find images at docker hub/instantlinux. Find a lot more details about the Kubernetes bare-metal installer in k8s/README.
The cluster-deployment tools here include ansible playbooks to spin up bare-metal or VM master/worker nodes, and a Makefile to add several additional features.
- Pod security policies
- Direct-attached SSD local storage pools
- Dashboard
- Non-default namespace with its own service account (full permissions within namespace, limited read-only in kube-system namespaces)
- Helm with tiller
- Mozilla sops with encryption (to keep credentials in local git repo)
- Encryption for internal etcd
- MFA using Authelia and Google Authenticator
- Flannel networking
- ingress-nginx
- Local-volume sync
- Automatic certificate issuing/renewal with Letsencrypt
Developer infrastructure
Networking and support
Service | Version | Notes |
---|---|---|
authelia | ** | single-signon multi-factor auth |
cloud | ** | nextcloud, private sync like Apple iCloud |
docs | OX Appsuite, private cloud like Google Docs | |
data-sync | poor-man's SAN for persistent storage | |
duplicati | backups | |
ez-ipupdate | Dynamic DNS client | |
haproxy-keepalived | load balancer | |
guacamole | ** | authenticated remote-desktop server |
logspout | ** | central logging for Docker |
mysqldump | per-database alternative to xtrabackup | |
nagiosql | NagiosQL with Nagios Core v4 for monitoring | |
nut-upsd | Network UPS Tools | |
rsyslogd | ** | logger in a 13MB image |
samba | file server | |
samba-dc | Active-Directory compatible domain controller | |
secondshot | rsnapshot-based backups | |
splunk | ** | the free version |
vsftpd | ftp server |
Entertainment
Thank you to the following contributors!
Contents created 2017-19 under Apache 2.0 License by Rich Braun.