Ænix.io
537 subscribers
89 photos
4 videos
169 links
Amplify your data center with cloud transformation

Cozystack developers: @cozystack

Contact: @kvaps @gecube @tym83
Download Telegram
We've decided to participate in Hacktoberfest. If you're participating too, come visit our GitHub and check out the amazing issues. And if something seems unclear, follow the links below; you'll find all the answers there :)

🫡 Rules and details https://hacktoberfest.com
😜 Cozystack GitHub https://github.com/aenix-io/cozystack
❤️ Cozystack community for all who wants to be a part of Hacktoberfest and asking questions https://t.me/cozystack
🔥2
📌Comparing GitOps: Argo CD vs Flux CD

Andrei Kvapil on KubeFM podcast

Dive into the world of GitOps and compare two of the most popular tools in the CNCF landscape: Argo CD and Flux CD.

Andrei Kvapil, CEO and Founder of Aenix, breaks down the strengths and weaknesses of Argo CD and Flux CD, helping you understand which tool might best fit your team's needs.

You will learn:
- The different philosophies behind the tools.
- How they handle access control and deployment restrictions.
- Their trade-offs in usability and conformance to infrastructure as code.
- Why there is no one-size-fits-all in the GitOps world.

Watch it here: https://kube.fm/flux-vs-argo-andrei

Listen on:
YouTube https://www.youtube.com/watch?v=4RVe32xRITo
Apple Podcast https://kube.fm/apple
Spotify https://kube.fm/spotify
Amazon Music https://kube.fm/amazon
Overcast https://kube.fm/overcast
Pocket casts https://kube.fm/pocket-casts
Deezer https://kube.fm/deezer
🔥12😁2👌1
Our Telegram sticker pack has been reworked and is now available at a new link:

https://t.me/addstickers/aenix_fox
61
What’s New in Cozystack v0.17: Windows on VMs, VM image upload app, and web interface for S3 buckets

Virtualization Enhancements
The old Virtual Machine app has been split into two separate apps: vm-disk and vm-instance.

vm-disk (Virtual Machine Disk) has been separated from the virtual machine application, now supporting image uploads from HTTP or local sources. When creating a disk, you can specify the source and type of image—CD-ROM or classic.

vm-instance (Virtual Machine Instance) allows you to launch a virtual machine from created disks.

This new structure enables the creation of virtual machines with multiple disks, installation from CD-ROMs, and the ability to switch disks between different VMs. This approach allows for more flexible disk and virtual machine configuration management.

The old Virtual Machine app has been retained for compatibility and to offer a simpler way of launching virtual machines in Cozystack.

InstanceType and InstanceProfile Options
New instanceType and instanceProfile options have been added, along with a default set of instances and profiles for Ubuntu, RHEL, Alpine, and Windows. You can now configure virtual machines with optimal parameters (e.g., enable TPM, use virtio devices, or tablet-pointer) depending on the operating system. Instead of manually specifying resources for a VM, you can use standardized instances designed for specific workloads.

These instance types also extend to Kubernetes, allowing for better planning of your node groups.

CDI Upload Proxy
An option for enabling proxying for image uploads from local machines has been added to the ingress, and the CDI (Containerized Data Importer) has been updated for better compatibility with block devices. Previously, image uploads for LINSTOR using the virtctl utility were unavailable, but we have resolved this issue and contributed a patch upstream to LINSTOR.

Windows Virtual Machine Support
With the new vm-disk and vm-instance features, we tested the installation of Windows 10 and Windows Server 2025 from ISO, followed by switching to VirtIO drivers. Everything works smoothly.

Web Interface for S3 Buckets
When ordering S3 buckets, a web interface is now automatically deployed for accessing them. You can upload and delete files, as well as generate temporary links for public access.

This interface is built on s3manager (Apache 2.0).

Alert System Improvements
New alerts for FluxCD have been added, providing real-time status updates on releases. Alerts are now more structured and categorized, making it easier to navigate and identify issues. Additionally, the Resource field now displays the specific problematic resource, allowing for faster troubleshooting and resolution.

Telegram Alert Integration
A new feature allows the delivery of alerts directly to Telegram, including deduplication to prevent alert spam. Alerts now come with actionable buttons, enabling you to manage the lifecycle of each alert (e.g., acknowledge, resolve) directly within the Telegram interface.

😎 We extend our thanks to community contributors who submitted PRs for this release: kingdonb, mrkhachaturov, klinch0.

👉 Details
🔥1511👨‍💻1
Hi everyone! On November 16, our founders @kvaps and @gecube will be speaking at CodeTalks.kz in Almaty, Kazakhstan. And our team will be in Kazakhstan for almost a week—from November 14 to 20. If you're around and would like to meet up to discuss cloud, platform engineering, @cozystack, or DevOps, feel free to message @tym83, and he’ll find a convenient time to connect.
🔥6👍3
Our community meeting about new Cozystack API. If you will have some thoughts, feel free to write to our TG group and ping @kvaps😉

00:00:00 Introduction and Agenda
00:01:03 New Cozystack API Server
00:02:32 Resource Configuration and Display
00:05:32 Creating New Resources
00:06:56 Reasons for Developing a New API
00:08:32 API Technical Details
00:12:40 Filtering and Version Control
00:15:01 Code Transparency and Next Steps
00:15:56 Default Roles
00:18:04 Limited Resource Access
00:18:46 Cluster Administrator Privileges
00:20:56 Access Restriction
00:22:31 Tenant Administrator
00:28:44 Shared Services
00:31:17 Conclusion

https://youtu.be/yn1ryGRtTGE
🎉3
Cozystack v0.18 Release: Public API Server, Metrics and Logs from Tenant Clusters, and Other Improvements

🔥 Public API for Cozystack
This is the biggest and most anticipated update for us. Cozystack now includes its own Kubernetes API server, which automatically translates all requests to custom resources into HelmReleases.

This means that platform administrators can now provide users with granular access to specific resources (Kuberneteses, VirtualMachines, Postgresses, etc.). Additionally, the API server can be easily extended with additional components by simply listing them in a ConfigMap—no recompilation required.

However, note that the dashboard still interacts with HelmReleases directly, so it’s not recommended to give end-users access to it just yet.

A demo of the API server and a guide on how to work with it can be found in the recording of the latest Cozystack community meeting (use the timestamps in the video description as a guide): Watch on YouTube.

Configuring Metrics and Logs Collection from Tenant Clusters
In the Kubernetes configuration for tenant clusters, there’s now an option to enable the monitoring agents addon. When enabled, all metrics and logs are automatically redirected to the monitoring system deployed within the user's tenant space.

Other Changes
- Database operators have been made optional components in the distro-full and distro-hosted editions.
- Talos Linux has been updated to version v1.8.2.
- Fixed the webhook in Alerta for managing alerts via Telegram.
- Removed redundant alerts.
- Added basic e2e tests to verify the deployment of each application.

For more details, check out the project on GitHub.

Feel free to join our community spaces:
- Telegram
- Slack
- Community Meeting Calendar
🔥53
Our latest community meeting

https://youtu.be/DCpivn61mGQ

00:00:00 Introduction and Organizational Notes
00:00:41 Decision to Use Keycloak as the Default OIDC Server
00:02:11 Integration with Kubernetes and Default Roles
00:03:57 Discussion of Using Multiple Realms in Keycloak
00:07:56 Mapping Groups and Roles
00:10:38 Configuring Groups and Roles
00:12:50 Access to Keycloak
00:15:50 Implementation Details of Adding Keycloak to Cozystack
00:18:06 Configuring Kubernetes with Keycloak
00:19:19 Kubernetes Interface and Tenant Management
00:21:27 Configuration Issues
00:23:50 User Experience
00:26:39 Cluster Authentication
00:30:18 Automation and Interaction
00:32:30 Issues with kube-config
00:34:55 Retrieving Tokens for Kubernetes Access
00:36:24 Automating Keycloak Configuration
00:37:52 Issues with Keycloak Setup
00:41:54 Enabling Keycloak by Default
00:44:12 Issues with Updating Helm
🔥31🤝1
😎 TIC Talks. Platform Engineering: Kubernetes all the way down

Our speakers for this edition of TIC Talks bring unparalleled expertise to the table. Vadim Rutkovsky, Principal Software Engineer at Red Hat, has over a decade of experience shaping the Linux and Kubernetes ecosystem. His deep involvement in OpenShift and his work on tools that redefine how developers interact with Kubernetes offer a rare insider’s perspective on platform engineering at scale.
Joining him is Andrei Kvapil, founder of Ænix and a Kubernetes and Cloud Systems Architect with 15+ years of experience. Known for his work in data center automation and community advocacy, Andrei’s ability to tackle complex challenges in bare-metal Kubernetes environments makes him a sought-after voice in the DevOps and SRE world.
This meetup is a unique chance to learn directly from two industry leaders who have not only influenced the tools we use but continue to push the boundaries of what’s possible in modern infrastructure.

When and Where:
📅 Date: December 10, 2024
🕕 Time: 6:00 PM
📍 Location: Berlin

Details: https://www.meetup.com/de-DE/tech-internals-community/events/304792105
👍5
We have updated the kubectl-node-shell plugin to v1.11.0

The kubectl-node-shell plugin allows you to log into a node in a cluster without SSH, using only the Kubernetes API. This is convenient for debugging any managed Kubernetes cluster. For example, AWS does not provide SSH access to nodes when using managed K8s.


- Added options: --no-mount, --no-net, --no-ipc, --no-uts to disable automatic entry into the specified Linux namespaces.
- Added variable: KUBECTL_NODE_SHELL_IMAGE_PULL_SECRET_NAME to specify a pullSecret for pulling the image.
- Added ability to attach volumes using the -m option; attached volumes can be found in the /opt-pvc directory.

Many thanks to @jmcshane, @huandu, and @bernardgut who added these wonderful features to the new version of the plugin.
10🔥54
🫡 Cozystack really needs your help

As you know, we want to donate Cozystack to the CNCF so that Cozystack will remain free forever and won't depend on the whims of a single vendor. However, we need the help of the entire community.

To get into the CNCF, we need to fill out the ADOPTERS.md file, among other things. Please send in your PR with your company or product/pet project where you use Cozystack. Alternatively, you can write the name of your company/product to @tym83, and he will make the PR himself.

Even if you haven't deployed Cozystack to production yet but have set up a dev cluster or are testing the platform's capabilities, your addition to this file can influence the decision of the committee that selects projects for the CNCF.

We always strive to rely on the community when making decisions about the development of the platform and believe that only the strength of the community can make an open-source product truly strong and in demand.

We will fill application form on 10th, December. Please, send your PRs before this date.
👍5🔥3
Latest Cozystack community meeting

- Upcoming v0.19 release: Introducing OIDC-server, Introducing KubeSpan Support
- [discussion]: which methods do you prefer for IaC configuration: Terraform, Helm, Crossplane, CAPI, Pulumi, WebUI

00:00:00 Introduction and Agenda
00:00:42 Plans for the Next Cozystack Release: OIDC Server, Keycloak
00:01:30 Keycloak Integration
00:03:57 Configuring Kubernetes via OIDC
00:05:15 Setting Up Keycloak Operator
00:06:35 Support for Distributed Configuration
00:10:36 Questions and Open Floor
00:14:50 Conclusion

🎥 https://youtu.be/06_7LTG128g

📌 Join our community: https://t.me/cozystack
🗓 Add our meetings in your cal
👍3