{"id":181782,"date":"2026-05-28T14:48:34","date_gmt":"2026-05-28T12:48:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes"},"modified":"2026-05-28T14:48:34","modified_gmt":"2026-05-28T12:48:34","slug":"vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","title":{"rendered":"Lan\u00e7amento do Cozystack 1.4, uma plataforma PaaS de c\u00f3digo aberto baseada em Kubernetes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Est\u00e1 dispon\u00edvel a vers\u00e3o da plataforma PaaS livre Cozystack 1.4, constru\u00edda sobre Kubernetes. O projeto visa fornecer uma plataforma pronta para provedores de hospedagem e um framework para construir nuvens privadas e p\u00fablicas. A plataforma \u00e9 instalada diretamente nos servidores e cobre todos os aspectos da prepara\u00e7\u00e3o da infraestrutura para fornecer servi\u00e7os gerenciados. O Cozystack permite iniciar e fornecer clusters Kubernetes, bancos de dados e <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/vps\/abuzoustojchivye-vps\/\" title=\"m\u00e1quinas virtuais\" data-wpil-keyword-link=\"linked\">m\u00e1quinas virtuais<\/a>. O c\u00f3digo da plataforma est\u00e1 dispon\u00edvel no GitHub e \u00e9 distribu\u00eddo sob a licen\u00e7a Apache-2.0.<\/p>\n<p>A plataforma inclui uma implementa\u00e7\u00e3o de rede (fabric) baseada em Kube-OVN e utiliza Cilium para a organiza\u00e7\u00e3o da rede de servi\u00e7os, MetalLB para a divulga\u00e7\u00e3o de servi\u00e7os externamente. O armazenamento \u00e9 implementado com o LINSTOR, onde \u00e9 proposta a utiliza\u00e7\u00e3o do ZFS como camada base para o armazenamento e DRBD para replica\u00e7\u00e3o. Existe um stack de monitoramento pr\u00e9-configurado baseado em VictoriaMetrics e Grafana. Para a inicializa\u00e7\u00e3o <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/vps\/\" title=\"m\u00e1quinas virtuais\" data-wpil-keyword-link=\"linked\">m\u00e1quinas virtuais<\/a> \u00e9 utilizada a tecnologia KubeVirt, que permite rodar m\u00e1quinas virtuais cl\u00e1ssicas diretamente em cont\u00eaineres Kubernetes e j\u00e1 possui todas as integra\u00e7\u00f5es necess\u00e1rias com o Cluster API para executar clusters Kubernetes gerenciados dentro de um cluster Kubernetes 'ferro'. Dentro da plataforma, \u00e9 poss\u00edvel implementar clicando servi\u00e7os como Kafka, FerretDB, PostgreSQL, Cilium, Grafana, Victoria Metrics e outros. <\/p>\n<p>Principais inova\u00e7\u00f5es no Cozystack 1.4.0:<\/p>\n<ul>\n<li class=\"l\"> Foi apresentado uma nova interface de gerenciamento, baseada no projeto cozystack-ui. O antigo stack openapi-ui e BFF foi substitu\u00eddo por um frontend em React 19 e TypeScript, que trabalha diretamente com a API do Kubernetes. Al\u00e9m disso, a interface agora possui suporte para URLs din\u00e2micos de VNC WebSocket para m\u00e1quinas virtuais, branding em tempo de execu\u00e7\u00e3o atrav\u00e9s do ConfigMap, leitura de ApplicationDefinition para o cat\u00e1logo de aplicativos e redirecionamento de antigos endere\u00e7os \/openapi-ui\/*.\n<li class=\"l\"> Para n\u00f3s workers de clusters multi-inquilino, foi implementado armazenamento persistente. As m\u00e1quinas virtuais dos n\u00f3s workers agora utilizam discos PVC atrav\u00e9s de KubeVirt dataVolumeTemplates em vez de emptyDisk. Com isso, os certificados kubelet, kubeconfig e o estado do containerd s\u00e3o mantidos ap\u00f3s a reinicializa\u00e7\u00e3o da m\u00e1quina virtual. O campo ephemeralStorage foi renomeado para diskSize, e uma configura\u00e7\u00e3o storageClass foi adicionada ao n\u00edvel do NodeGroup. Durante a migra\u00e7\u00e3o, os antigos valores s\u00e3o convertidos automaticamente.\n<li class=\"l\"> Foi adicionada uma nova esquema de presets de recursos, semelhante aos tipos de m\u00e1quinas virtuais dos provedores de nuvem. Os presets s\u00e3o descritos no formato ., onde as s\u00e9ries t1, c1, s1, u1 e m1 definem diferentes rela\u00e7\u00f5es de CPU e mem\u00f3ria, e os tamanhos variam de nano a 4xlarge. Ao todo, est\u00e3o dispon\u00edveis 40 op\u00e7\u00f5es. Os antigos nomes dos presets foram mantidos como aliases obsoletos e migrados automaticamente sem alterar os limites efetivos de CPU e mem\u00f3ria.\n<li class=\"l\"> O sistema de backup declarativo de aplicativos gerenciados foi expandido. O controlador backupstrategy recebeu estrat\u00e9gias para PostgreSQL, MariaDB, ClickHouse e FoundationDB. Suportam-se BackupClass, Plan, BackupJob e RestoreJob, backups agendados e pontuais, recupera\u00e7\u00e3o no local e recupera\u00e7\u00e3o em c\u00f3pia. Os dados s\u00e3o exportados para armazenamento de objetos compat\u00edvel com S3, e as credenciais s\u00e3o transmitidas via Kubernetes Secret.\n<li class=\"l\"> Foi adicionado o pacote de sistema opcional hami com HAMi 2.8.1 para acesso conjunto a GPUs NVIDIA em clusters de inquilinos. Workloads personalizados podem solicitar recursos nvidia.com\/gpu, nvidia.com\/gpumem e nvidia.com\/gpucores, permitindo distribuir vGPU entre v\u00e1rios pods. A ativa\u00e7\u00e3o \u00e9 feita atrav\u00e9s do par\u00e2metro hami.enabled e requer o NVIDIA GPU Operator.\n<li class=\"l\"> Foi adicionada uma configura\u00e7\u00e3o \u00fanica publishing.proxyProtocol para habilitar o protocolo PROXY em hosts com ingress-nginx. Ao ativ\u00e1-la, o Ouroboros \u00e9 implantado automaticamente, solucionando o problema de hairpin-NAT para acessos do cluster a seus nomes p\u00fablicos. Para clusters de tenant, existe a adi\u00e7\u00e3o addons.ouroboros.enabled.\n<li class=\"l\"> No cozystack-operator, foram adicionadas configura\u00e7\u00f5es para gera\u00e7\u00e3o de HelmRelease: interval, retry interval, install timeout, upgrade timeout e max history. A estrat\u00e9gia de repeti\u00e7\u00e3o foi alterada para RetryOnFailure, e para aplica\u00e7\u00f5es individuais, \u00e9 poss\u00edvel definir o timeout atrav\u00e9s da anota\u00e7\u00e3o release.cozystack.io\/helm-install-timeout. Isso resolve diversos problemas durante a inicializa\u00e7\u00e3o a frio de clusters de tenant.\n<li class=\"l\"> Para os n\u00f3s worker do Kubernetes de tenant, o provisionamento de recursos kubelet para CPU e mem\u00f3ria \u00e9 calculado automaticamente. As anota\u00e7\u00f5es cluster-autoscaler agora refletem os recursos alocados, em vez do total de CPU e mem\u00f3ria.\n<li class=\"l\"> Os componentes principais da plataforma foram atualizados: Talos 1.13.0, cert-manager 1.20.2, Cilium 1.19.3, NVIDIA GPU Operator 26.3.1, etcd-operator 0.4.3, KubeVirt 1.8.2, cozy-proxy 0.3.0, linstor-csi 1.10.6. Novos pacotes HAMi 2.8.1 e Ouroboros 0.7.2 foram adicionados.\n<li class=\"l\"> A diagnose foi aprimorada: o cozyreport agora coleta informa\u00e7\u00f5es sobre Flux, cert-manager, ambiente host, Application, ApplicationDefinition e recursos de Tenant, al\u00e9m de gerar um summary.txt com um resumo das quest\u00f5es atuais. Adicionados dashboards do Grafana e regras de coleta de dados para monitoramento de GPU.\n<li class=\"l\"> Foram corrigidos erros no MongoDB, Kafka, bootstrap do Kubernetes de tenant, etcd, Velero, Kamaji, LINSTOR, SeaweedFS, Harbor, objectstorage-controller, API e outros componentes. No API, a vulnerabilidade IDOR nos manipuladores TenantNamespace Get e Watch foi corrigida.\n<\/ul>\n<p>Ao atualizar, deve-se levar em considera\u00e7\u00e3o que os n\u00f3s worker dos clusters de tenant ser\u00e3o substitu\u00eddos sequencialmente uma vez devido \u00e0 transi\u00e7\u00e3o para discos PVC permanentes. M\u00e1quinas virtuais KubeVirt, iniciadas antes da atualiza\u00e7\u00e3o da plataforma, requerer\u00e3o um reboot a frio ap\u00f3s a transi\u00e7\u00e3o para KubeVirt 1.8.2, pois a migra\u00e7\u00e3o ao vivo de processos virt-launcher antigos pode falhar devido \u00e0 mudan\u00e7a de vers\u00e3o do QEMU. Al\u00e9m disso, os par\u00e2metros do PostgreSQL agora s\u00e3o tipificados e verificados pela denylist, e o cert-manager 1.20, por padr\u00e3o, executa cont\u00eaineres com UID\/GID 65532.<br \/>\n<br \/>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65547\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432. \u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0430\u0441\u043f\u0435\u043a\u0442\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. Cozystack \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b. \u041a\u043e\u0434 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181782","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cozystack 1.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-28T12:48:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-28T12:48:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7amento do Cozystack 1.4, plataforma PaaS aberta baseada em Kubernetes | ProHoster","description":"Est\u00e1 dispon\u00edvel o lan\u00e7amento da plataforma PaaS Cozystack 1.4, constru\u00edda com base no Kubernetes.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cozystack 1.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-28T12:48:34+00:00","article:modified_time":"2026-05-28T12:48:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/181782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=181782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/181782\/revisions"}],"predecessor-version":[{"id":182096,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/181782\/revisions\/182096"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=181782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=181782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=181782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}