[stackskipton]

Not that I've found and it would make sense there isn't really. Kubernetes with all it's warts is clear Nomad equivalent and insert random Kubernetes service mesh here.

I know neither of them are as nicely opinioned at those two services but there is starting to be plenty of more opinioned Kubernetes deployments.

[andix]

Could you maybe elaborate on what you consider an opinionated kubernetes deployment? Are there some open source projects you find promising?

[stackskipton]

Opinionated meaning it picks, install, patches your CNI/Ingress/Load Balancer/DNS Server/Metrics Server/Monitoring Setup.

k3s is probably most well known as it ships with bunch of preinstall software: https://github.com/k3s-io/k3s so you can just start throwing yaml files at cluster and handling workloads. It's what I use for my homelab.

Paid things I've heard of include OpenStack and SideroLabs. Haven't used personally by SRE coworkers say good things about them.

[andix]

Thanks, now I get what you mean. I’ve always called that a kubernetes distribution.

Plain kubernetes is as useless as a plain Linux kernel without a userland around it, and normally you don’t want to build a kubernetes or Linux distribution from scratch.

[ekimekim]

Most hosted options like GKE also fall into this category - networking, load balancers, and to a certain extent monitoring is all set up for you.

[stackskipton]

Yea, biggest thing I see missing in EKS/GKE/AKS is they don't come with Ingress Controller out of the box which is really frustrating. By default, they really should install Ingress-Nginx unless administrator asks for not to be installed.

It's pretty minor problem overall though.

[GauntletWizard]

AWS used to have an integrated Ingress Controller - It just sucked (At least partially because it was built by Google, not AWS). That AWS didn't take over hosting of it (it's not even available as an add-on!) when Kubernetes the Project removed the first-party support of it is... Well, it's a statement by AWS. They were dragged kicking and screaming into Kubernetes at all, because they see it as hurting their moat, and have stalled the Ingress project quite a bit.

[andix]

This startled me too in the beginning. I was expecting something built in, pre-wired to one of the commercial cdn/reverse proxy offerings (like cloudfront or Azure CDN).

But honestly I think the big cloud providers don’t want their kubernetes offerings to be too easy to use, they try to nudge inexperienced people to use their proprietary serverless products. Kubernetes does make switching to another cloud provider far too easy ;)

[ahmedtd]

GKE does ship with both Ingress and Gateway controllers integrated, they set up GCP load balancers with optional automatic TLS certificates.

I think you need to flip a flag on the cluster object to enable the Gateway controller.

[markhahn]

Really weird to see "opinionated" used as a good thing.

[stackskipton]

Most people, including Tech people, with software just want a list of sensible defaults out of the box. You are installing Calico, Ingress-Nginx, CoreDNS, MetalLB, cert-manager and ArgoCD out of the box? Cool, some deployment/service/ingress YAML later and my workloads are cooking.

As SRE who deals with a ton of Kubernetes clusters, I find a ton of needlessly complex clusters because rookies setting up the clusters didn't understand the implications of their actions and grabbed whatever a blog post said was good idea.