Overview

This project is a work in progress and as such there are a number of areas for improvement. As of this writing, the development process is primarily using AWS and MicroK8s for development and testing. However, there is manual testing being undertaken on several other K8 providers. Current information on known issues, bugs, and open feature requests can be seen on the Project GitHub Issue Page. Additionally, the core contributors are available for discussion on the Project GitHub Discussion Page

Provider Status

This matrix lists out the currently tested configurations, along with any notes on that configuration. The matrix includes the following:

K8 Provider: The name of the provider
Infrastructure Support: Does the project stand up the infrastructure with this provider?
Ingress Controller Options: What are the options for IC deployment?
FQDN/IP: How does the project handle the IP addressing and FQDN for the certificates?
Notes: Any additional information on the provider / project interaction.

All of these configurations use Pulumi code within Python as the Infrastructure as Code (IaaC) provider.

K8 Provider	Tested / Deploy Status	Infrastructure Support	IC Options	FQDN/IP	Notes
AWS EKS		Full Infrastructure Standup	Build, Pull (uses ECR)	Provided
Azure AKS	Yes	Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)
Digital Ocean		Full Infrastructure Standup	Build, Pull (Uses DO Registry)	Provided	Requires DNS delegation to DO
Google GKE	Yes	Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)
Harvester/RKE2	Yes	Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)	Needs Storage, K8 LoadBalancer
K3S		Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)
Linode		Full Infrastructure Standup	Build, Pull (uses Harbor install)	Provided
MicroK8s		Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)	Storage, DNS, and Metallb need to be Enabled (4)
Minikube		Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)
Rancher Desktop	No	Kubeconfig Only (3)	NGINX / NGINX Plus (w/ JWT) (1)	Manual FQDN (2)	Needs Storage, K8 LoadBalancer

Notes

The NGINX IC build/deploy process is currently under active development and support for IC will be standardized across all providers. Follow #81 and #86 for details. Currently, for all kubeconfig environments you have the option to specify either NGINX or NGINX Plus as your IC. The latter does require an active subscription and a JWT to be included at build time. Please see the documentation for more details.
The process via which the IP and FQDN are created and used is currently under active development, and will be streamlined and standardized for all providers. Follow #82 for details.
The initial deployment was entirely built to work with AWS. As part of our reorganization the ability to use a kubeconfig file was added, along with the necessary configuration to support additional standup options. This is currently in active development and will result in this process being streamlined for these additional environments. Please follow #80 for details.
We are currently using filebeat as our logging agent. This deployment requires that the correct paths to the container log directory are present in the deployment data. We have discovered that this differs based on the K8 provider. Please see #76 for more detail.

Known Issues / Caveats

Currently, the use of the Elastic tooling has shown to be problematic under heavy load, with containers falling over and causing disruptions. Please see the example configuration file variables to adjust the number of replicas deployed for the Elastic logstore to tune to your environment. These will need to be added/updated in the configuration for your stack, which is located in ./config/pulumi and is named Pulumi.$STACK.yaml.
The default Helm timeout is 5 minutes, which is acceptable for most managed clouds but tends to be too short for single-vm or workstation deployments. Please see the example configuration file variables to adjust the helm timeout as required for your environment. These will need to be added/updated in the configuration for your stack, which is located in ./config/pulumi and is named Pulumi.$STACK.yaml.
When load testing the Bank of Sirius using Locust, you will likely see a high failure rate as you increase the max users and spawn rate. This is "normal" and is an area we want to expose and explore for troubleshooting, determining which metrics/traces are helpful, etc.
The most common failure modes for non-cloud environments tend towards the following failures:
1. Unable to provision persistent storage; correct by ensuring you have a persistent volume provider and can provision a volume.
2. Unable to provision an External IP; correct by adding an IP provider such as kubevip or metallb.
3. Resource starvation (not enough CPU, Memory); expand the size of the VM or detune the environment.
4. Timeouts in helm; increase the helm timeout in the configuration file. If you are using a cloud provider with timed credentials, such as AWS, one failure mode that can arise is when the credentials expire. This will result in a number of strange and seemingly confusing errors. Double check to make sure that the credentials are valid.
Currently, the build/test process is highly manual. This will be addressed in the future.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!