The release of the free PaaS platform Cozystack 0.20.0, built on Kubernetes, has been published. The project aims to provide a ready-to-use platform for hosting providers and a framework for building private and public clouds. The platform installs directly on servers and covers all aspects of infrastructure preparation for managed services. Cozystack allows launching and providing Kubernetes clusters, databases, and virtual machines. The platform's code is available on GitHub and is distributed under the Apache-2.0 license.
The base technology stack uses Talos Linux and Flux CD. The images with the system, kernel, and necessary modules are pre-built and updated atomically, allowing for the avoidance of components such as dkms and package managers, while ensuring stable operation. A straightforward installation method is provided in an empty data center using PXE and the Debian-like installer talos-bootstrap.
The platform includes a free implementation of network infrastructure that is based on Kube-OVN and uses Cilium for organizing the service network, with MetalLB for announcing services externally. Storage is implemented on LINSTOR, which offers the use of ZFS as a base layer for storage and DRBD for replication. A pre-configured monitoring stack is based on VictoriaMetrics and Grafana. To launch of virtual machines KubeVirt technology is used, which allows for running traditional virtual machines directly in Kubernetes containers and already has all the necessary integrations with Cluster API for launching managed Kubernetes clusters within the 'bare-metal' Kubernetes cluster.
Key Changes:
- Kube-OVN has been updated to version 0.13.0.
- The logic of KubeVirt CCM (Cloud Controller Manager) has been improved, providing more stable load balancers for tenant-Kubernetes.
- User rights issues in OIDC have been resolved.
- A group for the cluster administrator has been added.
- Alerts and dashboards in Grafana have been fixed.
- NATS has gained the ability to enable jetstream and transmit configuration.
- The ability to use Terraform to interact with the platform's API has been added.
In the previous release of Cozystack 0.19, support for OIDC (OpenID Connect) was implemented, but due to stabilization work on the codebase, this release was not announced separately. Now, Cozystack comes with Keycloak, which automatically sets up the Cozy realm, within which local users can be created and connections with external OIDC providers can be configured. For each tenant, 4 groups are provided by default, and in the tenant application, a generated kubeconfig file can be automatically downloaded, configured for authentication via Keycloak. The possibility of configuring 'Keycloak as Code' has been provided through the introduction of Keycloak Operator. Integration of Keycloak with the K8s cluster and Dashboard is set up automatically.
Source: opennet.ru
