The ungleich kubernetes infrastructure¶

Status¶

This document is pre-production

General architecture and components overview¶

• All k8s clusters are IPv6 only
• We use BGP peering to propagate podcidr and serviceCidr networks to our infrastructure

ungleich kubernetes infrastructure v1¶

We are using the following components:

• Calico as a CNI + BGP
• kubernetes-secret-generator for creating secrets
• ungleich-certbot to get certificates