Ok, thanks a lot. Since we're on it, is there any open-source software available that is specifically targeted at easily setting up storage servers (maybe with an S3 like SDK)? I found myself pretty much forced to use GCS because of a lack of good alternatives.
Minio is very nice, but sadly it only allows one set of credentials – I’d have preferred being able to separate the access permissions of each service, but that’s not supported.
I was a total noob at this, and started setting up a kube cluster on 10th of May, and I managed to set up a working cluster by the middle of the week. It’s actually not as complicated as expected.
I still agree with you, because no one should take setting up and running kube lightly – it’s actually a lot of work.
And there’s a few guides for setting it up automatically in vagrant, or on aws, or on Juju-managed clouds.
Sadly, Kube is very barebones – only doing scheduling, if you add a storage provider such as portworx (only block storage) or rook (block and object storage) you also gain that, but it doesn’t do any user auth functionality.
That’s something I’m atm still searching for, something allowing me to easily register and remove users, add them to groups and do RBAC, but without using ldap as backend, and with a way to get it working with OpenID Connect and OAuth 2.0, as well as with Shibboleth, Kerberos, and an LDAP compatibility layer (but with app-specific passwords there).
Comments
Ok, thanks a lot. Since we're on it, is there any open-source software available that is specifically targeted at easily setting up storage servers (maybe with an S3 like SDK)? I found myself pretty much forced to use GCS because of a lack of good alternatives.
I haven't used it personally, but Minio [0] is something I've heard mentioned more than once.
[0] https://github.com/minio/minio/blob/master/README.md
Minio is very nice, but sadly it only allows one set of credentials – I’d have preferred being able to separate the access permissions of each service, but that’s not supported.
You will likely save a lot of headache to just use AWS or GCE. Running your own kube is a multiple week project.
I was a total noob at this, and started setting up a kube cluster on 10th of May, and I managed to set up a working cluster by the middle of the week. It’s actually not as complicated as expected.
I still agree with you, because no one should take setting up and running kube lightly – it’s actually a lot of work.
This is good, it means kube is about 100x easier to set up than openstack.
On the other hand, Google will run your Kube for free up to 5 nodes.
There’s actually even a hobbyists guide for running kube yourself: https://github.com/hobby-kube/guide
And there’s a few guides for setting it up automatically in vagrant, or on aws, or on Juju-managed clouds.
Sadly, Kube is very barebones – only doing scheduling, if you add a storage provider such as portworx (only block storage) or rook (block and object storage) you also gain that, but it doesn’t do any user auth functionality.
That’s something I’m atm still searching for, something allowing me to easily register and remove users, add them to groups and do RBAC, but without using ldap as backend, and with a way to get it working with OpenID Connect and OAuth 2.0, as well as with Shibboleth, Kerberos, and an LDAP compatibility layer (but with app-specific passwords there).