This project captures asks, work in progress, and completed work for the Microsoft Container Compute Upstream team in the form of issues and a project board
Перейти к файлу
Sertaç Özercan d9633862f5
add dalec (#148)
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
2024-09-10 16:41:54 -07:00
images update maturity diagram 2019-11-08 13:41:39 -08:00
process add releases to sandbox 2019-11-08 10:27:55 -08:00
.gitignore Initial commit 2019-02-12 09:27:39 -08:00
LICENSE Initial commit 2019-02-12 09:27:42 -08:00
README.md add dalec (#148) 2024-09-10 16:41:54 -07:00
SECURITY.md Microsoft mandatory file (#125) 2023-02-06 14:51:27 -08:00
jobs.md Update jobs.md (#149) 2024-09-09 11:31:22 -05:00

README.md

Azure Core Container Upstream Projects

This list of projects is maintained by the Azure Core Container Upstream team. This list is intended to help you make informed decisions about what projects to use (or not use) in the context of your goals (e.g. proof of concept vs. production). To make this decision you need to consider your goals, your need for formal support, the project's maturity, governance, version level, and your willingness to work in open source.

Support

Projects listed on this page are open source that Microsoft maintain or contribute to. These projects are NOT covered by the Microsoft Azure support policy. To get help please search the open issues on the project using the links in the table. To communicate with the Azure Container Compute Upstream team please use the issues in this repo. If your issue isn't already represented, please open a new one. However, if you consume one of these projects as a part of a Microsoft or Azure product or service, you may be eligible for support through that product or service.

Project list

Project Area Project & (artifacts) Goal Project State &
API Version
Communication Use on Azure
Kubernetes Cluster Management
Cluster API Azure Provider
(releases)
Tests
Self-managed clusters on Azure using Cluster API CNCF: incubating
API: v1alpha4
#cluster-api-azure
kubernetes-sig-cluster-lifecycle@googlegroups.com
GitHub issues
Image Builder
(releases)
Tests
Tools for building Kubernetes disk images #image-builder
kubernetes-sig-cluster-lifecycle@googlegroups.com
GitHub issues
Cluster API Add-on Provider for Helm
(releases)
Tests
Use Helm charts to manage the installation and lifecycle of Cluster API add-ons. CNCF: incubating
API: v1alpha1
#cluster-api
kubernetes-sig-cluster-lifecycle@googlegroups.com
GitHub issues
Cluster Autoscaler
(releases)
Tests
Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster. Kubernetes: stable #sig-autoscaling
kubernetes-sig-autoscaling@googlegroups.com
GitHub issues
Cluster Autoscaler Provider Azure
(releases)
Tests
Azure provider for running Cluster Autoscaler on AKS and Azure self-managed clusters. Kubernetes: stable #sig-autoscaling
kubernetes-sig-autoscaling@googlegroups.com
GitHub issues
Multi-Cluster Service APIs (MCS)
(releases)
Kubernetes standard APIs for multi-cluster service controller implementations. Kubernetes: alpha #sig-multicluster
kubernetes-sig-multicluster@googlegroups.com
GitHub issues
Kubernetes Enhancements
Windows containers
(kubernetes releases)
Tests
Run Windows server containers with Kubernetes Kubernetes: stable
API: N/A
#sig-windows
kubernetes-sig-windows@googlegroups.com
Windows Community Forum
GitHub issues
  • AKS Windows
  • IPv4/v6 Dual-Stack
    (kubernetes releases)
    Tests
    IPv4/IPv6 dual-stack enables the allocation of both IPv4 and IPv6 addresses to Pods and Services. Kubernetes:
    IPv6: beta
    Dual-stack: GA
    #sig-network
    kubernetes-sig-network@googlegroups.com
    GitHub issues
  • Use dual-stack with AKS
  • KMSv2
    (blog (alpha)
    blog (beta))
    Encryption at rest of Kubernetes data in etcd using Key Management Service (KMS) v2 API Kubernetes: GA
    API: v2
    #sig-auth-kms-dev
    GitHub issues
    Structured Authentication Configuration
    (blog (beta))
    Structured authentication configuration in the Kubernetes API server. Initially, only a jwt configuration will be supported, which will serve as the next iteration of the existing OIDC authenticator. Kubernetes: beta
    API: v1beta1
    #sig-auth-authenticators-dev
    GitHub issues
    Structured Authorization Configuration
    (blog (beta))
    Structured authorization configuration in the Kubernetes API serverintroducing a more structured and versatile way to configure the authorization chain, focusing on enabling multiple webhooks and providing explicit control mechanisms. Kubernetes: beta
    API: v1beta1
    #sig-auth-authorizers-dev
    GitHub issues
    Move Storage Version Migrator in-tree Move storage version migrator in-tree to make it easy for users to perform storage migrations. Kubernetes: alpha
    API: v1alpha1
    #sig-api-machinery-storageversion-dev
    GitHub issues
    Cloud Native Governance and Security
    OPA Gatekeeper
    (releases)
    K8s native Open Policy Agent policy enforcement Azure: GA (AKS and Arc)
    CNCF: graduated
    API: Config: v1alpha1; ConstraintTemplate: v1; Constraints: v1beta1; Mutation: v1; External Data: v1beta1
    #kubernetes-policy
    GitHub issues
  • Azure Policy for AKS
  • Azure Policy for Azure Arc connected clusters
  • Secrets Store CSI Driver
    (releases)
    Builds
    Integrates secrets stores with Kubernetes via a Container Storage Interface (CSI) volume Kubernetes: GA
    API: v1
    #csi-secrets-store
    GitHub issues
    Azure KeyVault Provider for Secrets Store CSI Driver
    (releases)
    Enables mounting AKV secrets as volumes in K8s pods Azure: GA (AKS and Arc)
    API: N/A
    GitHub issues Use with AKS
    KMS Plugin for Key Vault
    (releases)
    Enables encryption at rest of Kubernetes data in etcd using Azure Key Vault Azure: GA (AKS)
    API: N/A
    GitHub issues Use with AKS
    Azure Workload Identity
    (releases)
    Uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods based on Workload Identity federation Azure: GA (AKS)
    API: N/A
    GitHub issues How to use (OSS)
    How to use (AKS)
    Eraser
    (releases)
    Cleaning up images from Kubernetes nodes CNCF: sandbox
    Azure: GA (AKS)
    API: v1
    #eraser
    GitHub issues
    How to use (OSS)
    How to use (AKS)
    Copacetic (releases) CLI tool for directly patching container images using reports from vulnerability scanners CNCF: sandbox #copa
    GitHub issues
    How to use
    DALEC (releases) Produce secure packages and containers with declarative configurations Azure: incubating GitHub issues How to use
    Cloud Native Service Mesh
    Istio The leading service mesh on Kubernetes CNCF: graduated
    APIs: experimental, alpha, beta, stable
    Istio Slack
    GitHub issues
    Deploy Istio addon on AKS
    Gateway API A sig-network subproject that establishes a specification for service networking in Kubernetes (ingress and service mesh) Kubernetes: v1beta
    APIs: Standard and Experimental
    #gateway-api in Kubernetes Slack
    GitHub issues
    Use application gateway for containers
    Envoy Proxy A high performance, cloud-native proxy CNCF: graduated Envoy Slack
    GitHub issues
    Container Runtime
    Moby
    (releases)
    Toolkit for app containerization #opencontainers
    Moby Forums
    GitHub issues
  • Azure Kubernetes Service
  • Azure Stack Hub
  • many more
  • Containerd
    (releases)
    Complete container lifecycle management on Linux and Windows hosts CNCF: graduated
    API: N/A
    #opencontainers
    dev@opencontainers.org
    GitHub issues
  • Use with AKS
  • Containerd runwasi
    (releases)
    Facilitates running Wasm / WASI workloads managed by containerd CNCF: alpha #runwasi
    GitHub issues
  • Docker Desktop
  • Containerd Wasm Shims
    (releases)
    containerd shims for running WebAssembly workloads in Kubernetes DeisLabs: alpha #GitHub Issues
  • Docker Desktop
  • AKS WASI Node Pools
  • Platforms
    Brigade Event-driven scripting for Kubernetes CNCF: Archived
    API: v2
    #brigade channel on Kubernetes Slack
    GitHub Issues
    Deployment Tools
    Porter Package your application artifact, client tools, configuration and deployment logic together as a versioned bundle that you can distribute, and then install with a single command CNCF: Sandbox
    Stable: v0.38.x Prerelease: v1.0.0-alpha
    Mailing list, slack, etc
    Project Board
    Azure Service Operator, Azure Trusted Research Environments
    CNAB Specification Cloud Native Application Bundle Specification implemented by Porter Spec: 1.1 #cnab on CNCF Slack
    Issues
    Web Assembly / WASI
    SpiderLightning SpiderLightning defines a set of *.wit files that abstract distributed application capabilities, such as key-value, messaging, http-server/client and more. DeisLabs: alpha v0.3.2 GitHub Issues AKS WASI Node Pools
    Past Projects
    AKS Engine
    (releases)
    Self-managed clusters on Azure Azure: Deprecated. Consider using AKS or Cluster API Azure Provider
    Virtual Kubelet
    (releases)
    Enable services to masquerade as kubelet - serverless CNCF: sandbox
    API: N/A
    #virtual-kubelet
    GitHub issues
    AKS Virtual Nodes
    AAD Pod Identity
    (releases)
    Enables K8s applications to access cloud resources securely with Azure Active Directory Azure: Archived
    API: v1
    GitHub issues
    GitHub Project
    Use with AKS
    Service Mesh Interface (SMI) Spec A standard interface for service meshes on Kubernetes Deprecated; consider using Gateway API #smi
    GitHub issues
    Open Service Mesh (OSM) A lightweight, extensible, cloud native service mesh Deprecated; consider using Istio #openservicemesh
    GitHub issues

    Maturity

    Open source project maturity can be assessed on many dimensions including age, number of contributors, diversity of contributor employers, and many more. Two you should consider are represented in the table as:

    • Project state - The first entry in the Maturity column represents the project's status. Projects in the CNCF (kubernetes, kubernetes-sigs, prometheus, etc) use the CNCF maturity model. Projects in the Azure, Microsoft, or deislabs GitHub orgs are working towards using the graduation guidelines defined in this repo.
    • API or Feature Versions if relevant, are listed as the second entry of the Maturity column, and follow the Kubernetes convention except where noted

    Jobs

    Interested in joining our team at Microsoft? Please take a look at jobs to see current openings.