Deckhouse is an Open Source Kubernetes platform providing a means of creating identical Kubernetes clusters on any infrastructure and managing them in an automated fashion. Deckhouse uses the user-authn module for authentication. It establishes a unified authentication system that integrates with Kubernetes and the web interfaces of the other modules…

The Curator index manager allows you to create, delete and disable Elasticsearch indexes, as well as create and delete snapshots. Curator works well with OpenDistro, but our attempt to use it with the OpenSearch search engine failed: as it turned out, Curator did not support it. …

In Kubernetes, deploying resources to the cluster in a certain order often proves challenging. Sometimes you even have to wait until external resources are ready. …

A while ago, we decided to add support for Cilium to our Deckhouse Kubernetes platform. While developing this cni-cilium module, we encountered some difficulties we weren’t expecting. Luckily, we got a help from its authors to achieve the intended result. …

Please note this post was moved to a new blog: https://blog.werf.io/ — follow it if you want to stay in touch with the project’s news! What tasks might the user perform as part of a CI pipeline or local development? There are many such tasks, the most obvious of which…

Since the previous stable release of Deckhouse, our Kubernetes platform has managed to get CNCF certification for Kubernetes v1.22 and v1.23. It has also joined the Prometheus Operator’s adopters list and added Cilium as one of the supported CNIs. …

In the most common cases, having multiple GitLab installations is considered an anti-pattern. However, this is not always true: we manage dozens of our customers’ self-hosted GitLab instances. Periodically, the need arose to do something on all instances at once without wasting time repeating routine operations over and over. Part…

We are excited to announce the official launch of our new Open Source project! trdl (short for “true delivery”) provides a secure channel for delivering updates from the Git repository to the user’s host. trdl incorporates three core components that help protect the update system from potential attacks: the HashiCorp…

The new stable version of the Deckhouse platform, v1.32, has been released today. The latest release features some significant improvements, including two new modules, a new version of the Ingress controller, and a number of upgrades to existing components. Kubernetes v1.21 is now the default version for clusters where Kubernetes…