Kubernetes

Open source container orchestrator: API server, scheduler and node pools running declarative workloads.

Provider: default
Kind: Container orchestrator
Category: Compute
Official docs: https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/
Also known as: K8s

Properties · 4 set by this component

property	type	values	required	kind default	this component
autoscaling	boolean	—	no	false	▸ false
cniPlugin · component property	enum	none \| calico \| cilium \| flannel \| weave \| kube-router	no	none	inherited
datastore · component property	enum	etcd \| sqlite \| external	no	etcd	inherited
ingressController · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
networkPolicy	boolean	—	no	—	▸ false
nodeCount	integer	—	no	—	inherited
privateControlPlane	boolean	—	no	—	inherited
rbac	boolean	—	no	—	▸ false
secretsEncryptionAtRest · component property	boolean	—	no	false	inherited
version	string	—	no	—	inherited

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Stateful node without zone redundancyerror

stateful-node-without-zone-redundancy

A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.

— all of these hold:
— the node's `stateless` is false
— the node sits inside exactly 1 availability-zone group
— this does not hold:
— the node sits inside at least one cell group

Use it in a design

nodes:
  - { id: "kubernetes", component: "kubernetes" }

Other Container orchestrator products · 35

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Upstream Kubernetes, self-hosted. Per "kube-apiserver reference" --authorization-mode defaults to
3# AlwaysAllow, per "Network Policies" pods are non-isolated and no plugin enforces policy out of the box,
4# and per "Encrypting Confidential Data at Rest" the API server stores plain-text resources in etcd.
5schemaVersion: "1"
6type: "component"
7id: "kubernetes"
8kind: "container-orchestrator"
9provider: "default"
10docs: "https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/"
11aliases: ["K8s"]
12defaults:
13  managed: false
14  autoscaling: false
15  rbac: false
16  networkPolicy: false
17properties:
18  cniPlugin:
19    type: "enum"
20    values: ["none", "calico", "cilium", "flannel", "weave", "kube-router"]
21    default: "none"
22  secretsEncryptionAtRest:
23    type: "boolean"
24    default: false
25  ingressController:
26    type: "boolean"
27    default: false
28  datastore:
29    type: "enum"
30    values: ["etcd", "sqlite", "external"]
31    default: "etcd"

The same page as markdown, for an agent: /catalogue/components/kubernetes.md