hobby-kube/guide
Guide
هذا المشروع عبارة عن دليل نشر Kubernetes ومزود بنية تحتية مصمم لبيئات الهواة والمختبرات المنزلية. يوفر إطار عمل لإعداد مجموعات متعددة العقد عبر مختلف مزودي السحابة والعقد المادية أو الافتراضية، ويعمل كمنسق مجموعة ذاتي الاستضافة.
يركز المشروع على تعزيز الأمان واستقرار البنية التحتية من خلال أدلة تنفيذ محددة. يتضمن ذلك إطار عمل لأمن الشبكة يغطي جدران حماية المضيف وتراكبات الشبكة المشفرة، بالإضافة إلى تعليمات مفصلة لتكوين توجيه الدخول (ingress) لإدارة حركة المرور العامة الخارجية عبر تعيين DNS ومتحكمات حركة المرور.
تمتد إمكانيات المشروع إلى توفير التخزين الموزع، وتوفير طرق لتنفيذ تخزين الكتل المكرر والأحجام المستمرة التي تستمر بعد إعادة تشغيل الحاويات. كما يغطي إدارة الشهادات المؤتمتة للاتصالات المشفرة وتكوين عناصر التحكم في الوصول القائم على الأدوار.
Features
- Infrastructure Provisioning Recipes - Uses modular infrastructure provisioning recipes to automate the deployment of multi-node environments.
- Kubernetes Cluster Deployments - Offers an end-to-end framework for installing Kubernetes core components on personal hardware or cloud providers.
- Persistent Storage Volumes - Sets up a replicated block storage layer to provide persistent data volumes for containers.
- Replicated Persistent Volumes - Implements persistent volumes with synchronous block replication across nodes for fault tolerance.
- Cluster Infrastructure Hardening - Establishes a security framework for host firewalls, encrypted network overlays, and certificate management.
- Ingress Controllers - Implements ingress controllers to manage external access to cluster services via host network binding.
- Cloud Infrastructure Provisioners - Ships automated scripts to provision Kubernetes clusters and underlying infrastructure across various cloud providers.
- Self-Hosted Deployments - Provides a framework for deploying and operating distributed storage and networking on user-owned infrastructure.
- Storage Provisioning - Automates the provisioning of distributed block storage across multiple physical or virtual nodes.
- Ingress-Based Routing - Deploys ingress-based routing to direct external HTTP/HTTPS traffic to internal cluster services.
- Encrypted L2 Overlay Tunnels - Establishes encrypted L2 overlay tunnels to secure all internal communication between cluster nodes.
- Automated Certificate Management - Automates the lifecycle of TLS certificates for encrypted HTTPS connections within the cluster.
- Network Security Hardening - Provides comprehensive procedures for securing server infrastructure via firewalls and certificate management.
- Secure Node Networking - Establishes secure node-to-node networking via encrypted tunnels to protect internal cluster traffic.
- Cluster Network Hardening - Implements a security framework using host firewalls and encrypted overlays to protect internal cluster traffic.
- Distributed Storage - Provides a guide for implementing high-availability storage systems across multiple cluster nodes.
- Embedded Datastore High Availability - Deploys high-availability embedded datastores to ensure persistent storage for cluster state objects.
- Kubernetes Traffic Controllers - Provides a configuration guide for Kubernetes-native traffic orchestration and ingress management.
- Ingress Gateways - Configures specialized gateways to manage the external entry points of the Kubernetes cluster.
- External Traffic Routing - Implements mechanisms to route external public web traffic into internal cluster services.
- Firewall Rule Configurations - Configures kernel-level firewall rules at the node level to filter unauthorized network traffic.
- Certificate Renewal Managers - Provides automated retrieval and renewal of security certificates to secure web traffic.
- Firewall Configurations - Utilizes scripts to manage host-based network access rules and port security.
- Role-Based Access Control - Configures role-based access controls to restrict resource management permissions for users and service accounts.
- SSL Certificate Automation - Automates the workflow for obtaining and installing SSL/TLS certificates for secure connections.
