KubeAid is a Kubernetes management suite, offering a way to setup and operate K8s clusters, following gitops and automation principles.
KubeAid feature goals:
- Setup of k8s clusters on physical servers (on-premise or at e.g. Hetzner.com) and in cloud providers like Azure AKS, Amazon AWS or Google GCE
- Auto-scaling for all cloud k8s clusters and easy manual scale-up for physical servers
- Manage an ever-growing list of Open Source k8s applications (see
argocd-helm-charts/folder for a list) - Build advanced, customized Prometheus monitoring, using just a per-cluster config file, with automated handling of trivial alerts, like disk filling.
- Gitops setup - ALL changes in cluster, is done via Git AND we detect if anyone adds anything in cluster or modifies existing resources, without doing it through Git.
- Regular application updates with security and bug fixes, ready to be issued to your cluster(s) at will
- Air-gapped operation of your clusters, to ensure operational stability
- Cluster security - ensuring least priviledge between applications in your clusters, via resource limits and per-namespace/pod firewalling.
- Backup, recovery and live-migration of applications or entire clusters
- Major cluster upgrades, via a shadow Kubernetes setup utilizing the recovery and live-migration features
- Supply chain attack protection and discovery - and security scans of all software used in cluster
Operations teams face two constant challenges:
-
Building highly available setups – This is complex, always evolving as the software used in the setup evolves.
-
Enabling application teams to move faster – By improving how apps run in production.
Even with Kubernetes, most teams need to make the same decisions and solve the same problems again and again.
KubeAid changes this by providing a constantly evolving solution for high availability and security. Enabling the collaboration of operations teams across the world and increase the velocity of the team.
Combined with the services provided by Obmondo - the makers of KubeAid, your teams no longer need subject matter experts for every piece of the stack, and can instead focus on what matters most: helping application teams succeed in production.
Mirror this repo and the kubeaid-config repo into a Git platform of your choice,
and follow the README file in the kubeaid-config repository on how to write the config for your Kubernetes cluster.
You must NEVER make any changes on the master/main branch of you mirror of the kubeaid repository, as we use this to
deliver updates to you. This means that your cluster can be updated simply by running git pull on your copy of
this repository.
All customizations happens in your kubeaid-config repo.
For detailed installation steps and cluster setup guides, please refer to our documentation
Besides the community support, the primary developers of this project offers support via services on Obmondo.com - where you can opt to have us observe your world - and react to your alerts, and/or help you with developing new features or other tasks on clusters, setup using this project.
There are ZERO vendor lockin - so any subscription you sign - can be cancelled at any time - you only pay for 1 month at a time.
With a subscription we will be there, to ensure your smooth operations, in times of sickness and employee shortages - and able to scale your development efforts on kubeaid if needed.
We use sealed-secrets which means secrets are encrypted locally (by
the developer who knows them) and committed to your kubeaid config repo under the path
k8s/<cluster-name>/sealed-secrets/<namespace>/<name-of-secret>.json. See documentation in
./argocd-helm-charts/sealed-secrets/README.md
KubeAid is licensed under the Affero GPLv3 license, as we believe this is the best way to protect against the patent attacks we see hurting the industry; where companies submit code that uses technology they have patented, and then turn and litigate companies that use the software.
The Affero GNU Public License has always been focused on ensuring everyone gets the same privileges, protecting against methods like TiVoization, which means it's very much aligned with the goals of this project, namely to allow everyone to work on a level playing ground.
Read about the current status of all features of KubeAid from these links:
- GitOps setup and change detection
- Auto-scaling for all cloud k8s clusters and easy manual scale-up for physical servers
- Manage an ever-growing list of Open Source k8s applications
- Build advanced, customized Prometheus monitoring, using just a per-cluster config file
- Regular application updates with security and bug fixes, ready to be issued to your cluster(s) at will
- Air-gapped operation of your clusters, to ensure operational stability
- Cluster security
- Backup, recovery and live-migration of applications or entire clusters
- Major cluster upgrades, via a shadow Kubernetes setup utilizing the recovery and live-migration features
- Supply chain attack protection and discovery - and security scans of all software used in cluster
You can find the documentation, guides and tutorials at the /docs directory.