Tue, 16 Apr, 2024

Components

Components of Provision

The packages are divided into three types according to their size: tiny, small, and large. There is also a default list of packages that are mandatory.

Sealed Secrets:

Sealed Secrets are one-way encrypted secrets that can be created by anyone but can only be decrypted by the controller running in the target cluster. The Sealed Secret is safe to share publicly, upload to git repositories, post to twitter, etc.

Certificate Manager:

Cert-Manager is a native Kubernetes certificate management controller. It can help with issuing certificates from a variety of sources, such as Let’s Encrypt, HashiCorp Vault, Venafi, a simple signing key pair, or self-signed.

Contour Ingress Controller:

Contour is an Ingress controller for Kubernetes that works by deploying the envoy proxy as a reverse proxy and load balancer.

DNS Controller:

A controller that creates a CNAME record in the DNS Server to access your web applications as soon as a new environment is created.

Secrets/ConfigMap Reloader:

Reloader is a tool to watch changes in ConfigMap, Secret and do rolling upgrades on Pods with their associated DeploymentConfigs, Deployments, DaemonSets, and StatefulSets.

Secret Patcher:

Secret Patcher patches the service account with an imagepullsecrets that allows the service account of the pod to pull the images from the container registry.

Velero:

Velero is an open-source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

Zerone Jobs:

A package to implement cron jobs in the cluster.

Operator Lifecycle Manager (OLM):

A package to install Operator Lifecycle Manager in the cluster.

Tekton:

A package to install powerful and flexible Kubernetes-native open-source CI/CD systems.

Prometheus:

Prometheus is a systems and service monitoring system. It collects metrics from configured targets at given intervals, evaluates rule expressions, displays the results, and can trigger alerts when specified conditions are observed.

External Secrets:

The external secrets operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, and many more in our 01cloud environment.

External Logger:

The Logging operator manages the log collectors and log forwarders of your logging infrastructure and the routing rules that specify where you want to send your different log messages.

Flagger:

Progressive Delivery operator for Kubernetes (Canary, A/B Testing, and Blue/Green deployments).