DOCSEARCHbyAlgolia
Submit Docs

Kubestack Framework

website·Indexed 33 days ago

https://www.kubestack.com/framework/documentation/

A convention-over-configuration Terraform framework designed to make platform engineering accessible. It includes a catalog of modules for tools like Argo CD, Flux, Prometheus Operator, and cert-manager, and provides documentation on platform architecture, GitOps processes, and cluster management.

Tokens
20.8K
Snippets
80
Records
122
Agent score
67%

What's inside Kubestack

  1. Overview of the Argo CD Kubestack module

    The Argo CD Terraform module allows platform engineering teams to provision Argo CD (a declarative, GitOps continuous delivery tool) on Kubernetes. It integrates upstream Kubernetes resources into the Terraform lifecycle, allowing configuration via native Terraform syntax. The module can be used within the Kubestack framework or as a standalone Terraform module.

  2. Overview of the Kubestack Terraform framework

    Kubestack is a convention-over-configuration Terraform framework designed for Kubernetes Platform Engineering. It allows platform teams to define their entire stack—including cloud providers, regions, environments, clusters, node pools, and platform features—within a single Terraform codebase. It is designed to unify the developer experience and runtime environments across managed Kubernetes offerings including AWS EKS, Azure AKS, and Google GKE.

  3. Overview of the Tekton Terraform module

    The Tekton module is a Terraform-based wrapper for the open-source Tekton CI/CD framework. It integrates Tekton's Kubernetes CRDs (steps, tasks, and pipelines) into the Terraform plan/apply lifecycle, allowing platform teams to manage CI/CD infrastructure as code. The module can be used within the Kubestack framework via the kbst CLI or as a standalone Terraform module.

  4. Overview of Sealed Secrets for Kubernetes platforms

    Sealed Secrets allows for the safe storage of encrypted secrets within Git repositories. These secrets can only be decrypted by the controller running in the target Kubernetes cluster, which transparently converts them into regular Kubernetes secrets for workloads to consume. The Kubestack Terraform module integrates these upstream resources into the Terraform plan/apply lifecycle.

  5. Overview of the Kubestack Framework

    Kubestack is a Terraform framework designed for Kubernetes platform engineering teams. It allows teams to define an entire cloud-native stack within a single Terraform codebase and evolve the platform using GitOps. It provides tested, reusable implementations of common components to speed up time-to-value and reduce long-term maintenance.

  6. Overview of Kubestack Module Types

    Kubestack provides three types of Terraform modules to manage platform components. All modules implement a unified developer experience and an inheritance-based configuration model to support GitOps automation.

    1. Cluster Modules: Provision managed Kubernetes clusters and their required infrastructure dependencies using cloud-specific Terraform providers.
    2. Node-Pool Modules: Provision and attach node pools to clusters created by cluster modules.
    3. Platform Service Modules: Provision Kubernetes resources on clusters using the Kubestack Kustomization provider. These are available as catalog modules (bundling upstream releases) or custom manifest modules (for arbitrary Kubernetes YAML).

  7. Overview of OPA Gatekeeper Terraform Module

    The OPA Gatekeeper Terraform module enables platform engineering teams to provision OPA Gatekeeper as a Kubernetes admission controller. It integrates upstream Kubernetes resources into the Terraform plan/apply lifecycle, allowing governance and legal requirements to be enforced via native Terraform syntax.

  8. Overview of the Kubestack Framework

    Kubestack is a free and open-source Terraform framework designed for Kubernetes platform engineering teams. It provides scaffolding for Terraform code to help teams make architectural decisions and avoid repetitive boilerplate when building platform applications. It supports managed Kubernetes offerings from major cloud providers, including AWS (EKS), Azure (AKS), and GCP (GKE), allowing for a unified developer experience and runtime environment across different clouds.

  9. Overview of Pinniped for Kubernetes Platforms

    Pinniped is an authentication solution for Kubernetes API access using identities from upstream OIDC providers. It leverages Kubernetes impersonation, meaning it does not require access to the Kubernetes api-server flags to unify authentication across different cloud providers like AKS, EKS, and GKE. The Kubestack Terraform module integrates upstream Pinniped resources into the Terraform plan/apply lifecycle.

  10. Overview of the Kubestack Flux Terraform module

    The Flux Terraform module allows platform engineering teams to provision Flux (a GitOps operator for Kubernetes) using native Terraform syntax. It integrates upstream Kubernetes resources into the Terraform plan/apply lifecycle, automating synchronization between version control repositories and Kubernetes clusters.

  11. Understand Kubestack Platform Architecture Hierarchy

    Kubestack organizes platform infrastructure in a specific hierarchy to ensure consistency across environments. The relationship is as follows:

    1. A single code base defines the entire platform.
    2. The code base is applied to two or more Environments.
    3. Each environment contains one or more Clusters.
    4. Each cluster contains one or more Node Pools.
    5. Each cluster can have zero or more Platform Services.

  12. Implement a minimal starter architecture with kbst CLI

    The kbst CLI scaffolds a minimal starter architecture by default. This setup consists of one cluster and two environments: an internal ops environment used to validate changes before promotion, and an apps environment that runs all application environments.