{"id":181782,"date":"2026-05-28T14:48:34","date_gmt":"2026-05-28T12:48:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes"},"modified":"2026-05-28T14:48:34","modified_gmt":"2026-05-28T12:48:34","slug":"vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","title":{"rendered":"Lansarea Cozystack 1.4, platforma PaaS open-source bazat\u0103 pe Kubernetes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Este disponibil\u0103 versiunea liber\u0103 a platformei PaaS Cozystack 1.4, construit\u0103 pe baza Kubernetes. Proiectul vizeaz\u0103 furnizarea unei platforme gata de utilizare pentru furnizorii de g\u0103zduire \u0219i a unui cadru pentru construirea de cloud-uri private \u0219i publice. Platforma se instaleaz\u0103 direct pe servere \u0219i acoper\u0103 toate aspectele preg\u0103tirii infrastructurii pentru furnizarea de servicii gestionate. Cozystack permite lansarea \u0219i furnizarea de clustere Kubernetes, baze de date \u0219i <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\" title=\"ma\u0219ini virtuale\" data-wpil-keyword-link=\"linked\">ma\u0219ini virtuale<\/a>. Codul platformei este disponibil pe GitHub \u0219i se distribuie sub licen\u021ba Apache-2.0.<\/p>\n<p>Platforma include o implementare liber\u0103 a infrastructurii de re\u021bea (fabric) bazat\u0103 pe Kube-OVN \u0219i folose\u0219te Cilium pentru organizarea re\u021belei de servicii, MetalLB pentru anun\u021barea serviciilor \u00een exterior. Stocarea este implementat\u0103 pe LINSTOR, unde se ofer\u0103 utilizarea ZFS ca strat de baz\u0103 pentru stocare \u0219i DRBD pentru replicare. Exist\u0103 un stack de monitorizare preconfigurat bazat pe VictoriaMetrics \u0219i Grafana. Pentru lansare, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/vps\/\" title=\"ma\u0219ini virtuale\" data-wpil-keyword-link=\"linked\">ma\u0219ini virtuale<\/a> tehnologia KubeVirt, care permite rularea ma\u0219inilor virtuale clasice direct \u00een containere Kubernetes \u0219i are deja toate integr\u0103rile necesare cu Cluster API pentru a lansa clustere Kubernetes gestionate \u00een interiorul unui cluster Kubernetes 'hardware'. \u00cen cadrul platformei, se pot desf\u0103\u0219ura Kafka, FerretDB, PostgreSQL, Cilium, Grafana, Victoria Metrics \u0219i alte servicii cu un simplu clic. <\/p>\n<p>Noile inova\u021bii \u00een Cozystack 1.4.0:<\/p>\n<ul>\n<li class=\"l\"> A fost prezentat o nou\u0103 interfa\u021b\u0103 de gestionare, bazat\u0103 pe proiectul cozystack-ui. Vechea stiv\u0103 openapi-ui \u0219i BFF a fost \u00eenlocuit\u0103 cu un front-end pe React 19 \u0219i TypeScript, care lucreaz\u0103 direct cu API-ul Kubernetes. \u00cen plus, interfa\u021ba a primit suport pentru URL-uri WebSocket VNC dinamice pentru ma\u0219inile virtuale, branding runtime prin ConfigMap, citirea ApplicationDefinition pentru catalogul aplica\u021biilor \u0219i redirec\u021bionarea vechilor adrese \/openapi-ui\/*.\n<li class=\"l\"> Pentru nodurile worker ale clusterele tenant, s-a implementat stocare permanent\u0103. Ma\u0219inile virtuale ale nodurilor worker utilizeaz\u0103 acum discuri PVC prin KubeVirt dataVolumeTemplates \u00een loc de emptyDisk. Datorit\u0103 acestui fapt, certificatele kubelet, kubeconfig \u0219i starea containerd sunt salvate dup\u0103 repornirea ma\u0219inii virtuale. C\u00e2mpul ephemeralStorage a fost redenumit \u00een diskSize, iar setarea storageClass a fost ad\u0103ugat\u0103 la nivelul NodeGroup. \u00cen timpul migra\u021biei, valorile vechi sunt convertite automat.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 o nou\u0103 schem\u0103 de preseturi de resurse similar\u0103 tipurilor de ma\u0219ini virtuale ale furnizorilor de servicii cloud. Preseturile sunt descrise \u00een formatul ., unde seriile t1, c1, s1, u1 \u0219i m1 definesc diferite raporturi CPU \u0219i memorie, iar dimensiunile variaz\u0103 de la nano la 4xlarge. Sunt disponibile un total de 40 de op\u021biuni. Numelui vechilor preseturi au fost p\u0103strate ca aliasuri \u00eenvechite \u0219i sunt migrate automat f\u0103r\u0103 a modifica limitele reale ale CPU \u0219i memorie.\n<li class=\"l\"> Sistemul de backup declarativ pentru aplica\u021bii gestionate a fost extins. Controlerul backupstrategy a primit strategii pentru PostgreSQL, MariaDB, ClickHouse \u0219i FoundationDB. Sunt acceptate BackupClass, Plan, BackupJob \u0219i RestoreJob, backupuri programate \u0219i unice, recuperare la fa\u021ba locului \u0219i recuperare \u00een copie. Datele sunt extrase \u00eentr-un stocaj de obiecte compatibil S3, iar acreditivele sunt transmise prin Kubernetes Secret.\n<li class=\"l\"> A fost ad\u0103ugat un pachet de sistem op\u021bional hami cu HAMi 2.8.1 pentru accesul comun la GPU NVIDIA \u00een clusterele tenant. Sarcinile de lucru personalizate pot solicita resurse nvidia.com\/gpu, nvidia.com\/gpumem \u0219i nvidia.com\/gpucores, ceea ce permite distribuirea vGPU \u00eentre mai multe poduri. Activarea se face prin parametrul hami.enabled \u0219i necesit\u0103 NVIDIA GPU Operator.\n<li class=\"l\"> A ap\u0103rut o setare unic\u0103 publishing.proxyProtocol pentru activarea protocoalelor PROXY pe gazde cu ingress-nginx. Odat\u0103 activat\u0103, se desf\u0103\u0219oar\u0103 automat Ouroboros, care elimin\u0103 problema hairpin-NAT pentru apelurile din cluster c\u0103tre numele sale publice. Pentru clusterele tenant este prev\u0103zut un addon addons.ouroboros.enabled.\n<li class=\"l\"> \u00cen cozystack-operator au fost ad\u0103ugate set\u0103rile pentru generarea HelmRelease: interval, interval de re\u00eencercare, timp limit\u0103 de instalare, timp limit\u0103 de upgrade \u0219i max istoricul. Strategia de re\u00eencercare a fost configurat\u0103 pe RetryOnFailure, iar pentru aplica\u021biile individuale se poate specifica timpul limit\u0103 printr-o not\u0103 release.cozystack.io\/helm-install-timeout. Aceasta rezolv\u0103 o serie de probleme la pornirea rece a clusterelor tenant.\n<li class=\"l\"> Pentru nodurile worker ale Kubernetes-ului tenant, rezervarea resurselor kubelet pentru CPU \u0219i memorie este calculat\u0103 automat. Notarea cluster-autoscaler reflect\u0103 acum resursele alocate, nu volumul total de CPU \u0219i memorie.\n<li class=\"l\"> Componentele de baz\u0103 ale platformei au fost actualizate: Talos 1.13.0, cert-manager 1.20.2, Cilium 1.19.3, NVIDIA GPU Operator 26.3.1, etcd-operator 0.4.3, KubeVirt 1.8.2, cozy-proxy 0.3.0, linstor-csi 1.10.6. Au fost ad\u0103ugate noi pachete HAMi 2.8.1 \u0219i Ouroboros 0.7.2.\n<li class=\"l\"> Diagnostic\u0103 \u00eembun\u0103t\u0103\u021bit\u0103: cozyreport acum colecteaz\u0103 informa\u021bii despre Flux, cert-manager, mediu host, Application, ApplicationDefinition \u0219i resurse Tenant, precum \u0219i genereaz\u0103 summary.txt cu un rezumat al problemelor curente. Au fost ad\u0103ugate dashboard-uri Grafana \u0219i reguli de colectare a datelor pentru monitorizarea GPU.\n<li class=\"l\"> Au fost corectate erorile din MongoDB, Kafka, bootstrap tenant Kubernetes, etcd, Velero, Kamaji, LINSTOR, SeaweedFS, Harbor, objectstorage-controller, API \u0219i alte componente. \u00cen API, a fost remediat\u0103 vulnerabilitatea IDOR \u00een handler-urile TenantNamespace Get \u0219i Watch.\n<\/ul>\n<p>La actualizare, trebuie avut \u00een vedere c\u0103 nodurile worker ale clusterelor tenant vor fi \u00eenlocuite secven\u021bial o singur\u0103 dat\u0103 din cauza trecerii la disk-uri PVC permanente. Ma\u0219inile virtuale KubeVirt, lansate \u00eenainte de actualizarea platformei, vor necesita o repornire rece dup\u0103 trecerea la KubeVirt 1.8.2, deoarece migrarea live a proceselor vechi virt-launcher poate e\u0219ua din cauza schimb\u0103rii versiunii QEMU. \u00cen plus, parametrii PostgreSQL sunt acum tipiza\u021bi \u0219i verifica\u021bi conform denylist-ului, iar cert-manager 1.20, \u00een mod implicit, ruleaz\u0103 containere cu UID\/GID 65532.<br \/>\n<br \/>Sursa: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65547\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u043e\u0442\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432. \u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0430\u0441\u043f\u0435\u043a\u0442\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. Cozystack \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b. \u041a\u043e\u0434 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181782","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cozystack 1.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-28T12:48:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-28T12:48:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansare Cozystack 1.4, platform\u0103 PaaS deschis\u0103 construit\u0103 pe Kubernetes | ProHoster","description":"Este disponibil\u0103 lansarea platformei PaaS gratuite Cozystack 1.4, construit\u0103 pe Kubernetes.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cozystack 1.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cozystack 1.4, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Kubernetes.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-cozystack-1-4-otkrytoj-paas-platformy-na-baze-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-28T12:48:34+00:00","article:modified_time":"2026-05-28T12:48:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181782\/revisions"}],"predecessor-version":[{"id":182096,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181782\/revisions\/182096"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}