CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2024-12-25 19:59:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
e9c8520359
typhoon/digital-ocean/container-linux/kubernetes
History
Dalton Hubble e9c8520359 Add experimental Cilium CNI provider 
* Accept experimental CNI `networking` mode "cilium"
* Run Cilium v1.8.0-rc4 with overlay vxlan tunnels and a
minimal set of features. We're interested in:
  * IPAM: Divide pod_cidr into /24 subnets per node
  * CNI networking pod-to-pod, pod-to-external
  * BPF masquerade
  * NetworkPolicy as defined by Kubernetes (no L7 Policy)
* Continue using kube-proxy with Cilium probe mode
* Firewall changes:
  * Require UDP 8472 for vxlan (Linux kernel default) between nodes
  * Optional ICMP echo(8) between nodes for host reachability
    (health)
  * Optional TCP 4240 between nodes for endpoint reachability (health)

Known Issues:

* Containers with `hostPort` don't listen on all host addresses,
these workloads must use `hostNetwork` for now
https://github.com/cilium/cilium/issues/12116
* Erroneous warning on Fedora CoreOS
https://github.com/cilium/cilium/issues/10256

Note: This is experimental. It is not listed in docs and may be
changed or removed without a deprecation notice

Related:

* https://github.com/poseidon/terraform-render-bootstrap/pull/192
* https://github.com/cilium/cilium/issues/12217
2020-06-21 20:41:53 -07:00
..
cl Rename controller node label and NoSchedule taint 2020-06-19 00:12:13 -07:00
bootstrap.tf Add experimental Cilium CNI provider 2020-06-21 20:41:53 -07:00
controllers.tf Use strict mode for Container Linux Configs 2020-06-09 23:00:36 -07:00
LICENSE Add LICENSE to top-level of each module 2017-09-28 20:41:19 -07:00
network.tf Add experimental Cilium CNI provider 2020-06-21 20:41:53 -07:00
outputs.tf Add Kubelet kubeconfig output for DigitalOcean 2019-12-18 23:20:55 -08:00
README.md Update Kubernetes from v1.18.3 to v1.18.4 2020-06-17 19:53:19 -07:00
ssh.tf Rename CLC files and favor Terraform list index syntax 2019-12-28 12:14:01 -08:00
variables.tf Change container-linux module preference to Flatcar Linux 2020-04-11 14:52:30 -07:00
versions.tf Use strict mode for Container Linux Configs 2020-06-09 23:00:36 -07:00
workers.tf Use strict mode for Container Linux Configs 2020-06-09 23:00:36 -07:00

README.md

Typhoon

Typhoon is a minimal and free Kubernetes distribution.

  • Minimal, stable base Kubernetes distribution
  • Declarative infrastructure and configuration
  • Free (freedom and cost) and privacy-respecting
  • Practical for labs, datacenters, and clouds

Typhoon distributes upstream Kubernetes, architectural conventions, and cluster addons, much like a GNU/Linux distribution provides the Linux kernel and userspace components.

Features

  • Kubernetes v1.18.4 (upstream)
  • Single or multi-master, Calico or flannel networking
  • On-cluster etcd with TLS, RBAC-enabled, network policy
  • Advanced features like snippets customization
  • Ready for Ingress, Prometheus, Grafana, CSI, and other addons

Docs

Please see the official docs and the Digital Ocean tutorial.