This repository serves as an entry-point for multiple community-maintained components in the Kubermatic ecosystem. Feedback is highly encouraged ๐
Dedicated components for customer purposes.
Name | Description |
---|---|
certificates/self-signed-ca | How to create and managed self-signed CA at KKP |
controllers/aws-private-ip-enforce-controller | Enforces the assignPublicIP: false flag on all user cluster machine deployments |
controllers/component-override-controller | This bash-controller watches over Cluster objects and controls part of the spec.componentOverride. |
controllers/external-dns-route53 | external-dns is a controller that automatically creates dns records for your ingresses and loadbalancer services. This is a chart that deploys an opinionated configuration for working with AWS Route 53 |
controllers/pod-cidr-controller | This bash-controller watches over Cluster objects and patches spec.clusterNetwork.pods.cidrBlocks |
cron-jobs/scale-down | running a cron job that scales down worker nodes during non work hours and weekends. |
id-management/active-directory | Example how to configure KKP with Active Directory |
id-management/openldap | Helm based OpenLDAP setup to deploy a indipendent LDAP server into Kubernetes for testing purposes |
id-management/keycloak | Example on how to configure and integrate KeyCloak setup as custom OIDC provider into Kubermatic KKP |
loadbalancers/metallb | Example config for MetalLB what aims to redress this imbalance by offering a Network LB implementation that integrates with standard network equipment |
logging/audit/static-audit-log | Description how static audit logging could get configured |
vm-images/packer-ubuntu1804-vsphere-template | A packer template to customize an ubuntu 18.04 cloud-image on vSphere |
s3/s3-syncer-aws-cli | s3-syncer based CronJob on the aws s3 cli to sync two different S3 locations as well Azure (by Minio Azure Gateway) |
s3/s3-dbdump-syncer | s3-syncer based CronJob creates a DB dump of a postgres SQL database and sync it via the aws s3 cli to a target S3 location. |
api/cluster-management-by-api | Bash based management scripts to specify your KKP cluster by API for CI/CD or GitOPs purposes. |
vmware-exporter | Helm chart for VMware Exporter and Dashboard for Prometheus and Grafana for monitoring of vSphere environments in the KKP MLA stack. |
nutanix-exporter | Helm chart for nutanix-exporter - exporter for Prometheus that can be used for monitoring of Nutanix-based environments. |
Name | Description |
---|---|
vSphere kubeOne / Kubermatic demo | an example for running kubermatic on vSphere with kubeOne to install the |
AWS EKS -D kubeOne demo | an example for creating a Cluster running Amazon EKS-D |
Bare Metal - KubeOne Static Hosts | Example how to managed static bare metal workers. The "bare metal" workers are simulated with vSphere by terraform automation |
Bare Metal - KKP and kubeadm join implementation examples | Example how to use kubeadm to join the KKP managed controlplan: 1 Manual Example, 2 SSH Multi Client join script |
Baremetal node provisioning with OSM | This method allows you to provision a baremetal machine as a Kubernetes node, using the provisioning logic of OSM as provided by the specific OSP. |
Configuration and tooling for common used KKP - Guides - Addon for user cluster customization.
Name | Description |
---|---|
Makefile | Wrapper for building KKP addons for a dedicated version |
addon-manifests | Holding the AddonConfig custom resource specifications for a set of addons to configure KKP UI |
custom-addon/dns-resolve-overwrite | A DaemonSet with privileged permissions to overwrite the host DNS at the kubernetes nodes |
custom-addon/echoserver | Simple echo server application as an example workload deployment with ingress config |
custom-addon/ingress-nginx | Deploys the Ingress Nginx Controller to the user cluster |
custom-addon/trident-installer | Addon for NetApp Trident storage support into a user cluster |
custom-addon/openebs | OpenEBS addon for on-premise users without distributed storage |
custom-addon/amd-gpu | AMD-GPU device plugin addon |
custom-addon/kubeflow | Kubeflow Machine Learning Toolkit |
custom-addon/ntp-sync | DaemonSet to execute ntpdate primary secondary scheduled on every node of a cluster |
custom-addon/docker-pull | DaemonSet to pull e.g. docker.io based images on every node with a docker-secret, to prevent rate-limited infrastructure pods. |
custom-addon/flux2 | Deploys Flux for keeping your Kubernetes clusters in sync with sources of configuration (like Git repositories). |
custom-addon/argocd | Deploys ArgoCD - a declarative, GitOps continuous delivery tool for Kubernetes (as high availability installation). |
------- ARCHIVED --- | |
custom-addon/helm-operator | Deploys the FluxCD - Helm Operator for managing additional deployment trough Helm by CRD |
custom-addon/loki-stack | (Requires Helm Operator) Add Grafana Loki stack based on Grafana Loki Charts |
custom-addon/theia-ide | Customized KKP addon for quickly using Eclipse Theia IDE at your Kubernetes cluster. |
custom-addon/metallb | MetalLB cluster addon for on-premise user cluster without native LB support |
custom-addon/metallb-v2 | MetalLB cluster addon for on-premise user cluster without native LB support - with advanced config options, see MetalLB - Configuration. Used if IP range config is not enough. |
custom-addon/archive/kube-proxy-ipvs-patch | Custom overwrite Addon to patch IPVS mode to strictARP: true . |
Configuration and tooling for common used KKP - Guides - Application for user cluster customization.
Name | Description |
---|---|
README.md - Values | Sample values yaml for the Applications |
argocd-app | Argo CD - Declarative Continuous Delivery for Kubernetes. |
echoserver-app | Echo Server Example App |
eclipse-che-app | Preconfigured Eclipse Che IDE App |
flux2-app | Flux GitOps sync tool for application deployment |
harbor-app | Harbor App for user Clusters |
sysdig-secure-app | Sysdig Secure Integration for KKP User Clusters |
hivemq-app | HiveMQ Operator App to manage HiveMQ clusters in KKP user clusters |
Some useful containers to work with KubeOne and KKP
Name | Description |
---|---|
kubeone-tool-container | A docker container with various tools to work with KubeOne and Kubernetes |
kubermatic-dev-ui | Complete DEV UI Container including KubeOne and various tools to work with KubeOne, KKP and Kubernetes via a Frontend UI |
List of helper scripts and tools
Name | Description |
---|---|
git-crypt | git-crypt is a tooling to encrypt git repositories based GPG keys |
kubeone-makefile | Contains a template Makefile to manage KubeOne deployments |
kubermatic-installer-script | Contains a standalone usage of kubermatic - deploy.sh repo installation script for own installations. |
kubermatic-makefile | Contains a template Makefile to manage kubermatic deployments |
ssh-debug | SSH Debug Client for quickly ssh to nodes in an internal network |
vault/vault-k8s-mapper | Maps Vault secret as native Kubernetes secret into a defined namespace/secret. |
vault/vault-kv-management.sh | Management script to up/download secrets to a vault secret kv store. |
delete-evicted-pods-all-ns.sh | Deletes pods in state evicted |
headless.vnc.test.container.yaml | docker-headless-vnc-container container containing Linux UI exposed via webvnc for testing e.g. dashboards from internal cluster view |
kill-kube-ns.sh | kills a pending kubernetes namespace |
kubeconfig-kubermatic-serviceaccount.sh | creates an kubermatic service account at an seed cluster |
machinedeployment-patch.gce.sh | Scripts patches some specification of an Cluster API MachineDeployment object. |
set-build-tags-to-image.sh | Set dedicated build tags to the Kubermatic Charts |
untaint_master.sh | untaints all master nodes, to be able to schedule workload |
bash-port-scanner.sh | A Bash bases Port-Scanner which is able to scan ports without any dependencies or tools like nmap |
pvc.test.yaml | small pod + pvc to test if storage provisioning works |
refresh-all-service-accounts-in-cluster.sh | script to refresh all service accounts token (stored as secrets) and restart dependent pods semi-automatic |
local-connect-k8s-services.sh | A small helper script to kubectl port-forward a handful of service, in the example the typical MLA services prometheus , grafana , alertmanager |
ssh-jumphosts-template.sh | Template to create a jumphost script with predefined enviroments. |
Infrastructure benchmarking | Documentation on how to benchmark various infrastrucutre elements used for hosting a kubernetes cluster. |
KKP Project Viewer Service Account | Adding a service account with view-only rights to your KKP Master Cluster |
Helpful how-tos and detailed documentation:
Name | Description |
---|---|
setup-checklist/kkp | Detailed requirement documentation to setup Kubermatic KKP at different environments |
setup-checklist/kubeone | Detailed requirement documentation to setup KubeOne at different environments |
how-to-convert-to-docx | Commands to convert markdown to docx |
migrate-helm2-to-helm3 | This document shows you how to migrate Heml releases from using Helm version 2.x with Tiller to being managed by Helm version 3.x in place. |
node-health-check | This doc describes how Kubermatic node health checks works |
nvidia-gpu-operator | How to enable GPU support for KKP clusters by NVIDIA - GPU Operator |
offline-setup | How to run kubermatic in offline environments |
upload-ova-with-govc | How to upload ova by using govc |
how-to-collect-cluster-cpu-memory.md | How to collect the provisioned CPU/Memory of Kubernetes Clusters |
Guides how to operate KubeOne / KKP.
Name | Description |
---|---|
metallb-service-connection-drops-ipvs-strict-arp | Connection Drops of Service Type LoadBalancer provided by MetalLB. |
user-cluster-prometheus.md | Crash Looping Prometheus at KKP user cluster namespace |
manual-backup | How to create manual backup for your KKP/KubeOne setup. |
k8s-kubeconfig-expiring-failure.md | Expiring kubeconfig client certificate (at KubeOne Cluster example) |
If you encounter issues file an issue or talk to us on the #kubermatic channel on the Kubermatic Slack.
Thanks for taking the time to join our community and start contributing!
Feedback and discussion are available on #kubermatic channel.
- Please familiarize yourself with the Code of Conduct before contributing.
- See CONTRIBUTING.md for instructions on the developer certificate of origin that we require.
- We welcome pull requests. Feel free to dig through the issues and jump in.
See the list of releases to find out about feature changes.