The release of the free PaaS platform Cozystack 0.21.0, built on Kubernetes, is available. The project aims to provide a ready-made platform for hosting providers and a framework for building private and public clouds. The platform is installed directly on servers and covers all aspects of preparing the infrastructure for providing managed services. Cozystack allows you to launch and provide Kubernetes clusters, databases, and virtual machines. The platform code is available on GitHub and is distributed under the Apache-2.0 license.
Talos is used as the underlying technology stack. Linux and Flux CD. Images with the system, kernel, and necessary modules are pre-built and updated atomically, eliminating the need for components like dkms and a package manager, and ensuring stable operation. A simple installation method is provided in an empty data center using PXE and debian-similar installer talos-bootstrap.
The platform includes a free implementation network infrastructure (fabric) based on Kube-OVN, and uses Cilium for service mesh organization and MetalLB for service advertising. Storage is implemented on LINSTOR, which uses ZFS as the underlying storage layer and DRBD for replication. A pre-configured monitoring stack based on VictoriaMetrics and Grafana is included. To launch virtual machines KubeVirt technology is used, which allows you to run classic virtual machines directly in Kubernetes containers and already has all the necessary integrations with the Cluster API for launching managed Kubernetes clusters inside a hardware Kubernetes cluster.
The new version features a completely redesigned Dashboard interface, which now works directly with the Cozystack API rather than with FluxCD resources. The change provides a graphical interface to end users and enables them to assign rights to deploy certain services, taking into account the standard RBAC model in Kubernetes. Four groups are created by default for each tenant:
- view - for read-only access;
- use — to connect to virtual machines and use services;
- admin — to be able to order basic services (mysql, postgres, redis, kubernetes, virtual-machine, etc.);
- super-admin — for creating child tenants and running service services (monitoring, etcd, ingress and seaweedfs).
Users included in the appropriate groups can access both Kubernetes and Dashboard. Although Cozystack uses an API-oriented approach, Dashboard is an important part of the platform, as it allows you to quickly create the necessary services through a graphical interface, then see how they are displayed in the API, and then describe them as code (IaC).
Key measurements in Dashboard:
- Provided direct access to Cozystack API.
- Removed prefixes for applications, as each application now uses its own Kind.
- Namespaces are filtered by the "tenant-" prefix, which allows you to display only user namespaces and exclude system namespaces from display.
- Fixed display of icons when OIDC (OpenID Connect) is enabled.
- Added cosmetic fixes, including correct links to documentation.
Other changes:
- Added authorization for Redis.
- Refactored roles and role bindings for tenants, removed all permissions for HelmRelease resources, removed the kubeapps-admin group.
- Fixed Grafana launch, fixed URL for VictoriaLogs plugin.
- Fixed OpenAPI specification for List resources in Cozystack API.
- Talos Linux updated to version 1.8.4.
- Linstor-ha-controller has been updated to version 1.2.3, which has resolved the issue with virtual machine fault tolerance.
- Added size setting for Grafana database.
- Added additional capabilities for managing VMCluster resources.
Source: opennet.ru
