Coder Social home page Coder Social logo

ramiyengar / kore Goto Github PK

View Code? Open in Web Editor NEW
0.0 0.0 6.0 19.19 MB

Appvia Kore - Kubernetes for Teams, Making Cloud Simple for Developers and DevOps

License: GNU Affero General Public License v3.0

Dockerfile 0.02% Makefile 0.68% Go 98.90% Shell 0.25% Ruby 0.11% Smarty 0.04%

kore's Introduction

CircleCI GitHub tag (latest SemVer) License: Apache-2.0

Kubernetes for Teams via Appvia Kore

  • Cluster provisioning provides secure and consistent provisioning of kubernetes environments for teams.
  • Accounts & Account Users provides a single source for access and control across the estate.
  • Plans and Templates allows the administrators to define the type and shape of resources for teams to consume.
  • Managed Access Controls Provides a central means to manage and configure roles, policies and permissions across the estate.

Contents

Why Appvia Kore?

Appvia Kore is designed to make Kubernetes a commodity for your organisation and teams. Allowing any team to be able to get Kubernetes simply and easily, without relying on specialist resources to provision it for you, set it up and give you access credentials.

The Developer

  • Self serve Kubernetes clusters with best practice
  • On board and off board your teammates
  • Manage your Role Based Access Controls

You know how to work with containers or you’re starting that journey, but learning Kubernetes and Cloud is complicated and not necessarily a good use of your time. You just want to start deploying applications and using in-cluster or cloud services to start showing off your great work!

With Kore an administrator can configure a set of default known cluster best practices so you and your teammates can provision clusters safely and securely. You can on-board and off-board your own users, with them automatically getting access so you can iterate and deploy applications easily.

You can see what versions are deployed where, generate robot tokens for your Continuous Integration system and start iterating quickly and securely! With out-of-the-box developer roles and policies, you know that your applications are meeting the security requirements they need to!

The DevOps

  • Define best practice clusters as plans for developer teams to self-serve
  • Push user and application policies to clusters to enforce organisation wide controls
  • Iterate cluster validation as Code in your CI pipelines
  • Improve Kubernetes cluster security with security policies

You know what your developers need, they are also not shy of telling you! But you want to make sure that they get reliable, scalable and secure services before they consume them. Configuring all of this takes time and some of the components can be very complicated and time consuming to do correctly.

Not only that, but there is the cloud provisioning and architecture, that adds another hurdle to get over before teams can even consume Kubernetes and other cloud services! With Kore, we decided to enable cloud setup, as cloud accounts or projects are free, you can isolate teams to accounts, making cloud cost management, security and access controls simpler!

You can also setup default Kubernetes cluster plans that developer teams can consume without you needing to run CI, code or scripts. You can validate the plans work as they should once and then make them available. This might be anything from a Developer plan that is a single availability zone with cheap instance types, through to production plans with enhanced security settings across multiple availability zones for resilience and on-demand instances.

You can also define sensible policies globally, enhancing the security footprint once across all of your teams, so you know that everyone is working consistently and safely!

Architecture

Appvia Kore reuses the Kubernetes framework and enhances it to provide a more enriched set of features as well as an improved and simplified developer and operations experience. These enhancements that we have created are:

  • Kubernetes Cluster Plans
  • Team management and creation
  • SSO and authentication with your organisation IDP
  • Auditability on user actions, cluster creation and access management

Each enhancement works under the operator framework. The operators are domain specific features, such as team management or SSO configuration. To bring each domain specific operator together, we have the Kore API, which bridges each service and manages the coordination of data into each operator on your behalf.

All of the components run as a set of containers, so as long as there is Docker, you can run this either locally or in cloud. As it is using the Kubernetes framework, Kubernetes is a prerequisite to host Appvia Kore.

Note Appvia Kore is deemed an early release, the project is not regarded as production ready and is under rapid development; thus expect new features to rollout.

Administrator Flow

Admin Flow

Developer Team Flow

Developer Flow

Roadmap

Currently on the roadmap the following is either near completion and merge or currently in the works.

  • Cloud account management; provision of account management with the cloud provider.
  • Security compliance of cloud account and settings.
  • Operational review of deployments, versions, image vulnerabilities.
  • Extension of resource plans and allocations for teams.

kore's People

Contributors

asmith030 avatar bandesz avatar davet1985 avatar ezodude avatar gambol99 avatar jon-shanks avatar lewismarshall avatar marcinc avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.