The release of the open-source PaaS platform Cozystack 0.11.0, built on Kubernetes, has been published. The project aims to provide a ready platform for hosting providers and a framework for building private and public clouds. The platform installs directly onto servers and covers all aspects of infrastructure preparation for providing managed services. Cozystack allows launching and providing Kubernetes clusters, databases, and virtual machines. The platform's code is available on GitHub and is distributed under the Apache-2.0 license.
The base technology stack uses Talos Linux and Flux CD. The images with the system, kernel, and necessary modules are pre-built and updated atomically, allowing for the avoidance of components such as dkms and package managers, while ensuring stable operation. A straightforward installation method is provided in an empty data center using PXE and the Debian-like installer talos-bootstrap.
The platform includes a free implementation of network infrastructure that is based on Kube-OVN and uses Cilium for organizing the service network, with MetalLB for announcing services externally. Storage is implemented on LINSTOR, which offers the use of ZFS as a base layer for storage and DRBD for replication. A pre-configured monitoring stack is based on VictoriaMetrics and Grafana. To launch of virtual machines KubeVirt technology is used, which allows for running traditional virtual machines directly in Kubernetes containers and already has all the necessary integrations with Cluster API for launching managed Kubernetes clusters within the 'bare-metal' Kubernetes cluster.
In the new version:
- Added S3 support. A basic implementation of SeaweedFS has been prepared in Cozystack. A Kubernetes-COSI driver has been written for automatic provisioning of S3 buckets. The SeaweedFS package (chart) has been updated to support automatic resizing of volumes.
- Network isolation between tenants has been implemented. Significant work has been done to enhance network isolation between tenants, bugs have been fixed, and network policies have been completely redesigned.
- The user interface has been updated. All service icons have been replaced. The dashboard has been redesigned to display only the necessary information in ResourceView. It is now possible to specify specific resources to display by listing them in a special role -dashboard-resources.

- A Development Guide section has been added to the documentation, and the installation instructions in Hetzner have been updated.
- The Cilium network system has been upgraded to version 1.16, which includes a patch for automatic device detection prepared by the Cozystack developers.
- The issue with the garbage collector in tenant Kubernetes clusters has been resolved.
- The issue with HTTP and HTTPS traffic forwarding using ingress in tenant Kubernetes clusters has been resolved.
- The snapshot-controller and object-storage-controller have been added.
- LINSTOR has been updated to version 1.28.
- Talos Linux has been updated to version 1.7.6.
- Kube-OVN has been switched to a stable base build.
Source: opennet.ru

