News for hackers. Stuff that matters.
Re:Hetzner Private Cloud by jsjohnst on Sunday May 21, 2017 @11:01AM (#14387604)
Kubernetes on CoreOS is a good option. Tectonic makes the setup part relatively easy.
Re:Hetzner Private Cloud by stemuk on Sunday May 21, 2017 @11:45AM (#14387766)
Ok, thanks a lot. Since we're on it, is there any open-source software available that is specifically targeted at easily setting up storage servers (maybe with an S3 like SDK)? I found myself pretty much forced to use GCS because of a lack of good alternatives.
Re:Hetzner Private Cloud by jsjohnst on Sunday May 21, 2017 @12:07PM (#14387860)
I haven't used it personally, but Minio [0] is something I've heard mentioned more than once.

[0] https://github.com/minio/minio/blob/master/README.md

Re:Hetzner Private Cloud by kuschku on Sunday May 21, 2017 @12:31PM (#14387963)
Minio is very nice, but sadly it only allows one set of credentials – I’d have preferred being able to separate the access permissions of each service, but that’s not supported.
Re:Hetzner Private Cloud by brianwawok on Sunday May 21, 2017 @12:10PM (#14387880)
You will likely save a lot of headache to just use AWS or GCE. Running your own kube is a multiple week project.
Re:Hetzner Private Cloud by kuschku on Sunday May 21, 2017 @12:30PM (#14387956)
I was a total noob at this, and started setting up a kube cluster on 10th of May, and I managed to set up a working cluster by the middle of the week. It’s actually not as complicated as expected.

I still agree with you, because no one should take setting up and running kube lightly – it’s actually a lot of work.

Re:Hetzner Private Cloud by brianwawok on Sunday May 21, 2017 @05:10PM (#14389283)
This is good, it means kube is about 100x easier to set up than openstack.

On the other hand, Google will run your Kube for free up to 5 nodes.

Re:Hetzner Private Cloud by kuschku on Sunday May 21, 2017 @05:47PM (#14389422)
There’s actually even a hobbyists guide for running kube yourself: https://github.com/hobby-kube/guide

And there’s a few guides for setting it up automatically in vagrant, or on aws, or on Juju-managed clouds.

Sadly, Kube is very barebones – only doing scheduling, if you add a storage provider such as portworx (only block storage) or rook (block and object storage) you also gain that, but it doesn’t do any user auth functionality.

That’s something I’m atm still searching for, something allowing me to easily register and remove users, add them to groups and do RBAC, but without using ldap as backend, and with a way to get it working with OpenID Connect and OAuth 2.0, as well as with Shibboleth, Kerberos, and an LDAP compatibility layer (but with app-specific passwords there).