Network Isolation Between Tenants on Bare Metal: Cilium eBPF Policies, Plus Kube-OVN VPC
How Cozystack isolates tenants on bare metal by default with Cilium eBPF policies, plus optional Kube-OVN VPCs for workloads that need dedicated subnets.
Topic: Networking
Cozystack 1.2: OpenSearch, VPC Peering, and Smarter Tenant Scheduling
Cozystack 1.2 brings managed OpenSearch, VPC peering, SchedulingClass, and a stabilization follow-up in v1.2.1.
Article types:
Topics:
Cozystack v0.39: Topology-Aware Routing, Windows VM Scheduling, Talm Overhaul, and VMAgent for Tenants
Cozystack v0.39 adds Cilium topology-aware routing, Windows VM scheduling with nodeAffinity, a major Talm tool overhaul with encryption support, and VMAgent for tenant namespace metrics.
Article types:
Cozystack v0.38: Virtual Private Cloud, VNC Console, Configurable Worker K8s Versions, and HTTPS Enforcement
Cozystack v0.38 introduces Virtual Private Cloud with Multus CNI, VNC console for VMs in the dashboard, configurable Kubernetes worker versions, and HTTPS-only enforcement for the API.
Article types:
Cozystack v0.19: Keycloak SSO, Dashboard Services View, KubeVirt v1.4, and MetalLB Update
Cozystack v0.19 integrates Keycloak for SSO authentication, adds services to the dashboard, updates KubeVirt to v1.4.0, and brings new versions of Cilium, LINSTOR, and MetalLB.
Article types:
Cozystack v0.10: FerretDB, NATS, Network Policies for Tenant Isolation, and etcd Operator v0.4
Cozystack v0.10 adds FerretDB and NATS as managed applications, introduces network policies for tenant isolation, and updates the etcd operator to v0.4.
Article types:
Topics:
Cozystack v0.7: Network Stabilization, DNS Fixes, etcd Autocompaction, and cozy.local Domain
Cozystack v0.7 stabilizes tenant cluster networking with Kube-OVN and Cilium updates, fixes DNS propagation, enables etcd defragmentation, and introduces the cozy.local domain.
Article types:
Topics:
DIY: Create Your Own Cloud with Kubernetes (Part 2)
Article types:
Configuring routing for MetalLB in L2 mode
In this article I will show you how to configure source-based and policy-based routing for the external network on your cluster.