π‘ CNCF Cloud-Native Open Source Ecosystem β Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for CNCF Cloud-Native Open Source Ecosystem.
Collaboration tools
Issue Tracking
- Jira
β Features: Jira is a project management and issue tracking tool from Atlassian that helps software development teams leverage agile and other project management methodologies.
β Advantages: Powerful customization capabilities, numerous plugins and integrations available, detailed reports and dashboards.
β Disadvantages: Requires complex setup and user training, high cost.
β Provides installable software: Jira Software Data Center
β License: Commercial software
β Website: Jira - Redmine
β Features: Flexible project management and issue tracking tool, providing Gantt chart and calendar functions.
β Advantages: Easy to customize, and functionality can be expanded through various plugins.
β Cons: User interface is not modern, default settings can be somewhat limiting.
β Provision of installable software: Provided as open source and installable.
β License: GNU General Public License v2 (GPLv2)
β Website: Redmine - OpenProject
β Features: A tool that includes various functions such as project management, time tracking, bug tracking, wiki, etc.
β Advantages: Multi-project support and powerful community plugins.
β Disadvantages: Initial setup can be complicated, some advanced features are only available on paid plans.
β Provision of installable software: Provided as open source and installable.
β License: GNU General Public License v3 (GPLv3)
β Website: OpenProject - Taiga
β Features: A tool for agile project management, supporting Scrum and Kanban boards.
β Advantages: User-friendly interface and backlog management features.
β Disadvantages: May have limited functionality, scalability issues when used in large teams.
β Provision of installable software: Provided as open source and installable.
β License: GNU Affero General Public License (AGPLv3)
β Website: Taiga - Phabricator
β Features: Comprehensive tools for code review, repository hosting, project management, and bug tracking.
β Benefits: Powerful code review and collaboration features.
β Disadvantages: Can be complex to set up and maintain, has limited community support due to few users.
β Provision of installable software: Provided as open source and installable.
β License: Apache License 2.0
β Website: Phabricator
Markdown Wiki
- DokuWiki
β Markdown support: By default, DokuWiki uses its own syntax, but you can support Markdown by installing the Markdown plugin.
β Features: Easy to install and operates based on files, so no database is required. You can manage document access with ACL (Access Control List).
β Advantages: Simple installation and maintenance, lightweight system and fast operation.
β Disadvantage: Basic functions may be limited, and plugin installation is required for expandability.
β Provision of installable software: Provided as open source and installable.
β License: GNU General Public License v2 (GPLv2)
β Website: DokuWiki - BookStack
β Markdown support: BookStack uses a WYSIWYG editor by default, but provides a Markdown editing mode.
β Features: An open source documentation platform based on Laravel, allowing you to organize documents in the form of books, chapters, and pages. Provides an easy-to-use and intuitive interface.
β Advantages: Intuitive interface, easy document management, and powerful search functions.
β Disadvantage: Advanced features or customization may be limited.
β Provision of installable software: Provided as open source and installable.
β License: MIT License
β Website: BookStack
Kubernetes Options
Container Runtime
- Containerd
β Features: CNCF project, container runtime separated from Docker.
β Advantages: Lightweight, excellent performance, and smooth integration with Kubernetes.
β Disadvantage: Limited built-in tools.
β License: Apache License 2.0
β Website: Containerd - CRI-O
β Features: Open source container runtime optimized for Kubernetes.
β Advantages: Tightly integrated with Kubernetes, lightweight and enhanced security.
β Disadvantage: Initial setup can be somewhat complicated.
β License: Apache License 2.0
β Website: CRI-O
CNI (Container Network Interface)
- Istio-CNI
β Features: Network plugin integrated with Istio service mesh.
β Advantage: Network policy and security functions of Istio service mesh can be directly utilized.
β Disadvantage: Dependent on Istio.
β License: Apache License 2.0
β Website: Istio-CNI - Calico
β Features: High-performance networking and network security solution.
β Advantages: Network policy management is powerful and provides a high-performance data plane.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Calico - Cilium
β Features: High-performance network plugin based on eBPF.
β Advantages: Provides excellent performance and security features, Kubernetes native integration.
β Disadvantage: Initial setup and maintenance are somewhat complicated.
β License: Apache License 2.0
β Website: Cilium
Ingress Controller
- Istio-ingressgateway
β Features: Ingress controller provided as part of the Istio service mesh.
β Advantage: All service mesh features of Istio can be utilized.
β Disadvantage: Setup and management can be complicated.
β License: Apache License 2.0
β Website: Istio-ingressgateway - Nginx-ingress
β Features: Kubernetes Ingress Controller using NGINX.
β Advantages: Excellent performance and relatively simple setup.
β Disadvantage: Settings can be complicated when using advanced features.
β License: Apache License 2.0
β Website: Nginx-ingress - Kong-ingress
β Features: Ingress controller using Kong API gateway.
β Advantage: API management function is powerful and highly scalable.
β Disadvantage: Setup can be complicated and management difficult.
β License: Apache License 2.0
β Website: Kong-ingress
Service Mesh
- Istio (Envoy-Proxy)
β Features: Service mesh using Envoy proxy.
β Advantages: Provides various functions and powerful performance, excellent traffic management and security features.
β Disadvantage: Complex setup and maintenance.
β License: Apache License 2.0
β Website: Istio - Linkerd
β Features: Lightweight service mesh solution.
β Advantages: Simple installation and setup, excellent performance.
β Disadvantage: Functionality may be limited.
β License: Apache License 2.0
β Website: Linkerd
Traffic visualization tool
- Kiali (based on prometheus metrics)
β Features: Dashboard that visually displays the status of the service mesh.
β Advantages: Seamless integration with Istio, easy to identify traffic flow and performance issues.
β Disadvantage: Dependent on Istio.
β License: Apache License 2.0
β Website: Kiali
Traffic tracking tools
- Jaeger (based on prometheus metrics)
β Features: Open source tool for distributed tracing.
β Advantage: Useful for performance monitoring and troubleshooting.
β Disadvantage: Can be complicated to set up and maintain.
β License: Apache License 2.0
β Website: Jaeger
Monitoring
Collector
- Prometheus
β Features: Open source system monitoring and alerting toolkit.
β Advantage: Powerful metrics collection and query capabilities.
β Disadvantage: Scaling and high availability setup can be complicated.
β License: Apache License 2.0
β Website: Prometheus
Dashboard
- Grafana
β Features: Dashboard tool for metrics visualization.
β Advantages: Supports various data sources, allows creation of custom dashboards.
β Disadvantage: Settings can be complicated when using advanced features.
β License: AGPLv3
β Website: Grafana
CI/CD
Repository
- Chart Repository (Helm/GitOps)
β GitLab- Features: Platform that integrates source code management and CI/CD.
- Advantages: Powerful CI/CD pipeline, various integration features.
- Disadvantage: Advanced features can be expensive.
- License: MIT License
- Website: GitLab
- NexusRepository
- Features: Provides dependency management and artifact storage functions.
- Advantages: Supports various formats, suitable for large-scale storage management.
- Disadvantage: Can be complicated to set up and maintain.
- License: Commercial Software
- Website: NexusRepository
- ChartMuseum
- Features: Storage dedicated to Helm charts.
- Advantages: Easy to install and use, lightweight system.
- Disadvantage: Functionality may be limited.
- License: Apache License 2.0
- Website: ChartMuseum
Image Registry
- Harbor
β Features: Open source container image registry.
β Advantages: Security functions are strengthened and various image management functions are provided.
β Disadvantage: Can be somewhat complicated to set up and maintain.
β License: Apache License 2.0
β Website: Harbor - NexusRepository
β Features: Provides dependency management and artifact storage functions.
Repository) Chart repository (Helm/GitOps): GitLab, NexusRepository, ChartMuseum
Repository) Image registry: Harbor, NexusRepository
Dev/Build) Source code configuration management tool: GitLab
Dev/Build) Source code static analysis tool: SonarQube
Dev/Build) Dependency management tool: NexusRepository
deploy) Application build/deployment management: jenkins, go-cd, argo-workflow
deploy) Infrastructure deployment management (Helm/GitOps): argo-cd
Dev/Build Dependency Management Tool
- Nexus Repository
β Features: Open source artifact repository manager.
β Advantages: Supports various package formats (Maven, npm, Docker, etc.), suitable for large-scale repository management.
β Disadvantage: Can be complicated to set up and maintain.
β License: Commercial software
β Website: Nexus Repository
Application build/deployment management
- Jenkins
- Features: Open source automation server, capable of building build and deployment pipelines.
- Advantage: Rich plugin ecosystem allows expansion of various functions.
- Disadvantage: Can be complicated to set up and difficult to maintain.
- License: MIT License
- Website: Jenkins
- GoCD
- Features: Open source build tool for CI/CD.
- Advantages: Visually configurable pipeline, powerful tracking capabilities.
- Disadvantages: Setup can be complicated and the learning curve can be steep.
- License: Apache License 2.0
- Website: GoCD
- Argo Workflow
- Features: Kubernetes native workflow engine.
- Advantages: Ideal for defining and executing complex workflows.
- Disadvantage: Setup can be complicated.
- License: Apache License 2.0
- Website: Argo Workflow
Infrastructure deployment management (Helm/GitOps)
- Argo CD
- Features: Kubernetes native CD tool with GitOps approach.
- Advantages: Declarative application management and deployment, strong integration with Git.
- Disadvantage: Can be complicated to set up and manage.
- License: Apache License 2.0
- Website: Argo CD
Logging
Repository
- OpenSearch (ELK stack alternative)
β Features: Open source fork of Elasticsearch and Kibana.
β Advantage: Provides integrated search, analysis, and visualization tools.
β Disadvantage: Can be complicated to set up and maintain.
β License: Apache License 2.0
β Website: OpenSearch
Collector
- Fluentd
β Features: Open source tool for collecting and transmitting log data.
β Advantage: Supports various input and output plugins.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Fluentd - Airflow
β Features: Platform for defining and managing data pipelines.
β Advantage: Suitable for defining complex data workflows.
β Disadvantage: Can be complicated to set up and maintain.
β License: Apache License 2.0
β Website: Airflow
Dashboard and query tools
- OpenSearch Dashboard
β Features: OpenSearchβs data visualization tool.
β Advantage: Provides powerful visualization and dashboard functions.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: OpenSearch Dashboard
Check/Backup
k8s cluster resources, PV backup
- Velero
β Features: Open source tool for backup and recovery of Kubernetes clusters.
β Advantage: Perform easy backup and recovery operations.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Velero
Other
Cloud Native API Gateway
- Kong
- Features: Extensible open source API management tool.
- Advantages: Various plugins and flexible expandability.
- Disadvantage: Can be complicated to set up and maintain.
- License: Apache License 2.0
- Website: Kong
- Istio
- Features: Service mesh using Envoy proxy.
- Advantage: Provides traffic management and security features.
- Disadvantage: Setup can be complicated.
- License: Apache License 2.0
- Website: Istio
- Tyk
- Features: Open source API gateway.
- Advantages: Provides various authentication and analysis functions.
- Disadvantage: Setup can be complicated.
- License: MPL 2.0
- Website: Tyk
Cloud Native Runtime Security Tools
- Falco
β Features: Real-time security monitoring and threat detection tools.
β Advantages: Integration with Kubernetes is seamless and real-time security monitoring is possible.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Falco
Batch Management Tool
- K8s-cronjob
β Features: Kubernetes native cron task scheduler.
β Advantage: Easy time-based task scheduling.
β Disadvantage: Limited support for complex workflows.
β License: Apache License 2.0
β Website: K8s-cronjob - Argo Workflow
β Features: Kubernetes native workflow engine.
β Advantage: Define and execute complex workflows.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Argo Workflow - Tekton
β Features: Kubernetes native CI/CD pipeline tool.
β Advantage: Define and execute pipeline as code.
β Disadvantage: Setup can be complicated.
β License: Apache License 2.0
β Website: Tekton - Airflow
β Features: Data pipeline definition and management platform.
β Advantage: Defining complex data workflows.
β Disadvantage: Complex setup and maintenance.
β License: Apache License 2.0
β Website: Airflow - kubeflow
Secret Management Tool
- infisical
Authentication token management tool
- keycloak
TLS Management Tool
- cert-manager
Message queue
- rabbitmq
- kafka
- activemq
Volume Virtualization (Ceph)
- rook-ceph




Leave a Reply