The ungleich kubernetes infrastructure » History » Version 2
Nico Schottelius, 07/01/2021 03:31 PM
| 1 | 1 | Nico Schottelius | h1. The ungleich kubernetes infrastructure |
|---|---|---|---|
| 2 | |||
| 3 | h2. Status |
||
| 4 | |||
| 5 | This document is **pre-production** |
||
| 6 | |||
| 7 | h2. General architecture and components overview |
||
| 8 | |||
| 9 | * All k8s clusters are IPv6 only |
||
| 10 | * We use BGP peering to propagate podcidr and serviceCidr networks to our infrastructure |
||
| 11 | 2 | Nico Schottelius | * The main / public repository is "ungleich-k8s":https://code.ungleich.ch/ungleich-public/ungleich-k8s |
| 12 | 1 | Nico Schottelius | |
| 13 | |||
| 14 | h2. ungleich kubernetes infrastructure v1 |
||
| 15 | |||
| 16 | We are using the following components: |
||
| 17 | |||
| 18 | * Calico as a CNI + BGP |
||
| 19 | * "kubernetes-secret-generator":https://github.com/mittwald/kubernetes-secret-generator for creating secrets |
||
| 20 | * "ungleich-certbot":https://hub.docker.com/repository/docker/ungleich/ungleich-certbot to get certificates |
||
| 21 | 2 | Nico Schottelius | * "rook with ceph rbd + cephfs":https://rook.io/ for storage |
| 22 | ** rbd for almost everything, *ReadWriteOnce* |
||
| 23 | ** cephfs for smaller things, multi access *ReadWriteMany* |