Qihoo360/wayne
Wayne
Wayne is a Kubernetes multi-cluster management platform and multi-tenant orchestrator. It provides a centralized system for managing deployments, resources, and tenant isolation across multiple clusters from a single interface.
The platform distinguishes itself through an integrated application delivery workflow that handles container image building, versioned publishing, and release rollbacks. It features a browser-based web console that enables secure remote pod administration via a terminal proxy and simplifies resource creation using template-based object deployments.
The system covers enterprise identity integration via LDAP and OAuth 2.0, role-based access control for tenant isolation, and operational auditing with webhook-driven logging. It also includes tools for resource usage reporting and internal administrator notifications.
Features
- Multi-Cluster Deployment Managers - Provides a centralized control plane for managing deployments and resources across multiple Kubernetes clusters.
- Multi-Cluster Orchestrators - Coordinates the lifecycle of Kubernetes objects across multiple remote clusters from a single management plane.
- Application Publishing Pipelines - Implements automated publishing workflows to deliver software versions to target Kubernetes clusters.
- Multi-Cluster Coordination - Coordinates numerous Kubernetes cluster environments from a single interface to support multi-tenant requirements.
- Multi-Tenant Orchestrators - Orchestrates multi-tenant environments by enforcing project-level isolation and resource quotas.
- Application Delivery Workflows - Provides automated sequences for publishing software versions and tracking releases to enable rapid rollbacks.
- Kubernetes Cluster Management - Provides a centralized platform for provisioning, configuring, and managing the lifecycle of multiple Kubernetes clusters.
- Enterprise Identity Providers - Integrates enterprise identity sources including LDAP, OAuth 2.0, and internal databases for centralized authentication.
- Cluster Resource Isolation - Separates workloads and resources for different teams to ensure secure and private sharing within the cluster.
- Role-Based Access Controls - Enforces strict operational boundaries by mapping users to specific departments and projects via role-based access control.
- Role-Based Access Control - Manages user permissions and restricts operational capabilities by assigning users to specific departments and projects.
- Multi-Provider Authentication - Supports multiple enterprise login methods including LDAP, OAuth 2.0, and internal database authentication.
- User Access Management - Defines and enforces granular access rules to control which users can manage specific applications or cluster resources.
- Deployed Version Tracking - Maintains a historical log of deployment states to facilitate application version monitoring and atomic rollbacks.
- Web Terminal Proxies - Facilitates secure remote shell access to pods through an authenticated browser-based terminal proxy.
- Web-Based Kubernetes Management Interfaces - Offers a web-based interface for deploying cluster objects and accessing pod shells without requiring a CLI.
- Container Image Building - Compiles source code into container images for deployment to a centralized registry.
- Object Configuration Deployers - Facilitates the creation of cluster resources using simplified configuration forms or direct JSON and YAML editing.
- Template-Based Kubernetes Generators - Simplifies the creation of complex Kubernetes resources using pre-defined configuration forms that generate YAML or JSON.
- Pod Shell Access - Provides secure, permission-enforced interactive terminal sessions directly within running Kubernetes pods.
- Web-Based Pod Terminals - Enables secure remote execution of commands in running pods via an authenticated browser-based terminal.
- Deployment History - Tracks deployment history and maintains versioned logs to enable rapid rollback of cluster resources.
- Operation Audit Logs - Provides detailed logs of system operations and resource usage reporting for monitoring cluster health.
- Dashboards And Portals - Web-based UI for managing multi-cluster Kubernetes environments.
