4 ms·

Ok, thanks a lot. Since we're on it, is there any open-source software available that is specifically targeted at easily setting up storage servers (maybe with

by stemuk 9y ago

Ok, thanks a lot. Since we're on it, is there any open-source software available that is specifically targeted at easily setting up storage servers (maybe with an S3 like SDK)? I found myself pretty much forced to use GCS because of a lack of good alternatives.

jsjohnst 9y ago
I haven't used it personally, but Minio [0] is something I've heard mentioned more than once. [0] https://github.com/minio/minio/blob/master/README.md https://github.com/minio/minio/blob/master/README.md
- kuschku 9y ago
  Minio is very nice, but sadly it only allows one set of credentials – I’d have preferred being able to separate the access permissions of each service, but that’s not supported.
brianwawok 9y ago
You will likely save a lot of headache to just use AWS or GCE. Running your own kube is a multiple week project.
- kuschku 9y ago
  I was a total noob at this, and started setting up a kube cluster on 10th of May, and I managed to set up a working cluster by the middle of the week. It’s actually not as complicated as expected. I still agree with you, because no one should take setting up and running kube lightly – it’s actually a lot of work.
  - brianwawok 9y ago
    This is good, it means kube is about 100x easier to set up than openstack. On the other hand, Google will run your Kube for free up to 5 nodes.
    - kuschku 9y ago
      There’s actually even a hobbyists guide for running kube yourself: https://github.com/hobby-kube/guide https://github.com/hobby-kube/guide And there’s a few guides for setting it up automatically in vagrant, or on aws, or on Juju-managed clouds. Sadly, Kube is very barebones – only doing scheduling, if you add a storage provider such as portworx (only block storage) or rook (block and object storage) you also gain that, but it doesn’t do any user auth functionality. That’s something I’m atm still searching for, something allowing me to easily register and remove users, add them to groups and do RBAC, but without using ldap as backend, and with a way to get it working with OpenID Connect and OAuth 2.0, as well as with Shibboleth, Kerberos, and an LDAP compatibility layer (but with app-specific passwords there).

by stemuk 9y ago

jsjohnst 9y ago

I haven't used it personally, but Minio [0] is something I've heard mentioned more than once. [0] https://github.com/minio/minio/blob/master/README.md https://github.com/minio/minio/blob/master/README.md

kuschku 9y ago
Minio is very nice, but sadly it only allows one set of credentials – I’d have preferred being able to separate the access permissions of each service, but that’s not supported.

brianwawok 9y ago

You will likely save a lot of headache to just use AWS or GCE. Running your own kube is a multiple week project.

kuschku 9y ago
I was a total noob at this, and started setting up a kube cluster on 10th of May, and I managed to set up a working cluster by the middle of the week. It’s actually not as complicated as expected. I still agree with you, because no one should take setting up and running kube lightly – it’s actually a lot of work.
- brianwawok 9y ago
  This is good, it means kube is about 100x easier to set up than openstack. On the other hand, Google will run your Kube for free up to 5 nodes.
  - kuschku 9y ago
    There’s actually even a hobbyists guide for running kube yourself: https://github.com/hobby-kube/guide https://github.com/hobby-kube/guide And there’s a few guides for setting it up automatically in vagrant, or on aws, or on Juju-managed clouds. Sadly, Kube is very barebones – only doing scheduling, if you add a storage provider such as portworx (only block storage) or rook (block and object storage) you also gain that, but it doesn’t do any user auth functionality. That’s something I’m atm still searching for, something allowing me to easily register and remove users, add them to groups and do RBAC, but without using ldap as backend, and with a way to get it working with OpenID Connect and OAuth 2.0, as well as with Shibboleth, Kerberos, and an LDAP compatibility layer (but with app-specific passwords there).