typhoon/digital-ocean/fedora-coreos/kubernetes
Dalton Hubble 804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager
* Generate TLS client certificates for `kube-scheduler` and
`kube-controller-manager` with `system:kube-scheduler` and
`system:kube-controller-manager` CNs
* Template separate kubeconfigs for kube-scheduler and
kube-controller manager (`scheduler.conf` and
`controller-manager.conf`). Rename admin for clarity
* Before v1.16.0, Typhoon scheduled a self-hosted control
plane, which allowed the steady-state kube-scheduler and
kube-controller-manager to use a scoped ServiceAccount.
With a static pod control plane, separate CN TLS client
certificates are the nearest equiv.
* https://kubernetes.io/docs/setup/best-practices/certificates/
* Remove unused Kubelet certificate, TLS bootstrap is used
instead
2020-12-01 22:02:15 -08:00
..
fcc Add kubeconfig's for kube-scheduler and kube-controller-manager 2020-12-01 22:02:15 -08:00
bootstrap.tf Add kubeconfig's for kube-scheduler and kube-controller-manager 2020-12-01 22:02:15 -08:00
controllers.tf Isolate each DigitalOcean cluster in its own VPC 2020-06-28 23:25:30 -07:00
LICENSE Add support for Fedora CoreOS on DigitalOcean 2020-04-09 23:55:29 -07:00
network.tf Isolate each DigitalOcean cluster in its own VPC 2020-06-28 23:25:30 -07:00
outputs.tf Set kubeconfig and asset_dist as sensitive 2020-11-23 11:41:55 -08:00
README.md Update Kubernetes from v1.19.3 to v1.19.4 2020-11-11 22:56:27 -08:00
ssh.tf Add support for Fedora CoreOS on DigitalOcean 2020-04-09 23:55:29 -07:00
variables.tf Remove asset_dir variable and optional asset writes 2020-10-17 15:00:15 -07:00
versions.tf Relax terraform-provider-ct version constraint 2020-11-29 19:51:26 -08:00
workers.tf Isolate each DigitalOcean cluster in its own VPC 2020-06-28 23:25:30 -07:00

Typhoon

Typhoon is a minimal and free Kubernetes distribution.

  • Minimal, stable base Kubernetes distribution
  • Declarative infrastructure and configuration
  • Free (freedom and cost) and privacy-respecting
  • Practical for labs, datacenters, and clouds

Typhoon distributes upstream Kubernetes, architectural conventions, and cluster addons, much like a GNU/Linux distribution provides the Linux kernel and userspace components.

Features

  • Kubernetes v1.19.4 (upstream)
  • Single or multi-master, Calico or flannel networking
  • On-cluster etcd with TLS, RBAC-enabled, network policy, SELinux enforcing
  • Advanced features like snippets customization
  • Ready for Ingress, Prometheus, Grafana, CSI, and other addons

Docs

Please see the official docs and the Digital Ocean tutorial.