The release of the free Cozystack 0.30.0 PaaS platform, built on Kubernetes, is now available. The project aims to provide a ready-made platform for hosting providers and a framework for building private and public clouds. The platform installs directly on servers and covers all aspects of infrastructure preparation for providing managed services. Cozystack allows you to launch and deliver Kubernetes clusters, databases, and virtual machines. The source code of the platform is available on GitHub and is distributed under the Apache-2.0 license.
The base technology stack uses Talos Linux and Flux CD. The images with the system, kernel, and necessary modules are pre-built and updated atomically, allowing for the avoidance of components such as dkms and package managers, while ensuring stable operation. A straightforward installation method is provided in an empty data center using PXE and the Debian-like installer talos-bootstrap.
The platform includes a free implementation of network infrastructure (fabric) based on Kube-OVN, and uses Cilium for organizing the service network, MetalLB for announcing services externally. Storage is implemented on LINSTOR, where ZFS is offered as the base layer for storage and DRBD for replication. There's a preconfigured monitoring stack based on VictoriaMetrics and Grafana. To run virtual machines, the KubeVirt technology is used, which allows classic virtual machines to run directly in Kubernetes containers and already has all the necessary integrations with Cluster API for launching managed Kubernetes clusters within a 'bare metal' Kubernetes cluster.
Over the past month and a half, the project team has released seven new versions: 0.24-0.30. Among the changes in these releases:
- Stabilization of the platform for use in multi-DC configurations. Significant work has been done to configure etcd, Cilium, Kuve-OVN, Linstor, and other components.
- Enhancement and improvement of the observability stack. Dashboards have been added for a number of components, and Grafana settings have been optimized, speeding it up.
- Release of the additional utility cozy-proxy, which allows issuing an IP address to virtual machines in K8s.
- Introduction of the Vertical Pod Autoscaler. VPA automatically sets resource limits that an application can consume. Limits are determined based on historical metrics.
- Refactoring and addition of new sections to the documentation.
- Relocation of the platform repository and auxiliary utilities from the aenix-io organization to the cozystack organization after the project's transfer to the CNCF Sandbox.
- Cozystack 0.30: Introduction of the GPU operator and added support for GPU in virtual machines. GPU support allows the platform to run tasks related to machine learning.
- Cozystack 0.29: Work has been done to improve the stability and reliability of the platform. The CVE-2025-1974 vulnerability in ingress-nginx has been fixed. A set of presets has been added to limit resource consumption. Automatic certificate renewal has been implemented. The Cilium host firewall has been added. A process for running e2e tests in GitHub CI has been established.
- Cozystack 0.28: Introduction of the Vertical Pod Autoscaler, which automatically sets limits on resources available to various applications. Tenant isolation is enabled by default. The responsibility for validating source IPs has been transferred from Cilium to Kube-OVN.
- Cozystack 0.27: A set of linstor plunger scripts has been proposed for automatically correcting errors in LINSTOR (e.g., DRBD lost connection, hanging loop device, etc.). Added the ability to distribute PostgreSQL replicas across different nodes. Dashboards for monitoring ClickHouse and Piraeus have been introduced.
- Cozystack 0.26: Stability has been improved when working in multi-DC configurations. Network connectivity monitoring has been added. The ability to restrict resources for individual tenants within the cluster has been introduced. The Goldpinger tool has been added for monitoring latency between data centers. Live migration of virtual machines is enabled by default. The ability to create snapshots of LINSTOR volumes has been introduced.
- Cozystack 0.25: An auxiliary tool, cozy-proxy, has been added to allocate IP addresses entirely to virtual machines — not just individual ports. In Cosyastack, virtual machines are based on KubeVirt and are managed similarly to pods. Kubernetes does not provide the allocation of entire IP addresses to pods. Cozy-proxy solves this issue, which is important for clients of service providers whose applications run in virtual machines and require a separate IP address. Monitoring of etcd, Flux, and Kafka has been enhanced and corresponding dashboards added. Users with access only to specific tenants can now download kubeconfig.
- Cozystack 0.24: The ability to deploy via PXE has been introduced to automatically load Talos Linux onto nodes. The package smee (dhcp+pxe server) from the Tinkerbell set has been included. Darkhttp has been replaced with the custom-developed cozystack-assets-server. Grafana's image now includes plugins for faster startup.
Source: opennet.ru
