K3s

Lightweight single-binary Kubernetes distribution with an embedded datastore and built-in network policy controller.

Provider: default
Kind: Container orchestrator
Category: Compute
Official docs: https://docs.k3s.io/networking/basic-network-options

Properties · 4 set by this component

property	type	values	required	kind default	this component
autoscaling	boolean	—	no	false	▸ false
cniPlugin · component property	enum	flannel \| calico \| cilium \| none	no	flannel	inherited
datastore · component property	enum	sqlite \| embedded-etcd \| external	no	sqlite	inherited
ingressController · component property	boolean	—	no	true	inherited
managed	boolean	—	no	false	▸ false
networkPolicy	boolean	—	no	—	▸ true
nodeCount	integer	—	no	—	inherited
privateControlPlane	boolean	—	no	—	inherited
rbac	boolean	—	no	—	▸ true
serviceLoadBalancer · component property	boolean	—	no	true	inherited
version	string	—	no	—	inherited

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Stateful node without zone redundancyerror

stateful-node-without-zone-redundancy

A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.

— all of these hold:
— the node's `stateless` is false
— the node sits inside exactly 1 availability-zone group
— this does not hold:
— the node sits inside at least one cell group

Use it in a design

nodes:
  - { id: "k3s", component: "k3s" }

Other Container orchestrator products · 35

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# K3s, Rancher's single-binary Kubernetes distribution. Per the "CIS Self Assessment Guide" the API server
3# runs with --authorization-mode=Node,RBAC, per "Basic Network Options" the default CNI is Flannel with a
4# built-in network policy controller (--disable-network-policy turns it off), and SQLite is the default datastore.
5schemaVersion: "1"
6type: "component"
7id: "k3s"
8kind: "container-orchestrator"
9provider: "default"
10docs: "https://docs.k3s.io/networking/basic-network-options"
11defaults:
12  managed: false
13  autoscaling: false
14  rbac: true
15  networkPolicy: true
16properties:
17  datastore:
18    type: "enum"
19    values: ["sqlite", "embedded-etcd", "external"]
20    default: "sqlite"
21  cniPlugin:
22    type: "enum"
23    values: ["flannel", "calico", "cilium", "none"]
24    default: "flannel"
25  serviceLoadBalancer:
26    type: "boolean"
27    default: true
28  ingressController:
29    type: "boolean"
30    default: true

The same page as markdown, for an agent: /catalogue/components/k3s.md