github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-15 19:32:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
awesome-kubernetes/v2-docs/kubernetes-on-premise.md

52 KiB
Raw Permalink Blame History

description
description
Top Kubernetes On Premise resources for 2026, AI-ranked: **Kubespray**, krd and more — curated Cloud Native tools, guides and references.

On-Premise Production Kubernetes Cluster Installers

!!! tip "Nubenetes V2 Elite Portal" You are browsing the AI-Curated V2 Elite Edition. Looking for the exhaustive list of references? Check out the V1 Historical Archive.

!!! info "Architectural Context" Detailed reference for On-Premise Production Kubernetes Cluster Installers in the context of The Container Stack.

Application Delivery

Developer Platforms

Vmware Tanzu

  • (2022) zdnet.com: VMware brings Tanzu Application Platform into GA to ease Kubernetes adoption [ADVANCED LEVEL] [COMMUNITY-TOOL] — News of VMware's general availability announcement of Tanzu Application Platform (TAP). TAP serves as an enterprise-grade PaaS (Platform-as-a-Service) overlay on Kubernetes, packaging cloud-native buildpacks, API portals, Cartographer supply chains, and security scanning tools to deliver a streamlined developer experience.

Architectural Foundations

Kubernetes Tools

General Reference

Databases

Kubernetes Operators

Vmware Tanzu (1)

  • (2020) tanzu.vmware.com: VMware Tanzu SQL: MySQL at Scale Made Easy for Kubernetes [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Tanzu SQL provides a robust, operator-driven solution for provisioning and operating MySQL databases within Kubernetes clusters. It automates common lifecycle events such as data replication, high availability clustering, automatic backups, and critical security patching.

Delivery

Air-gapped Deployments

Zero Trust

  • (2026) ==defenseunicorns/zarf== ⭐ 1925 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A highly resilient developer tool designed by Defense Unicorns to package, deploy, and manage Kubernetes clusters and cloud-native applications in strictly air-gapped, offline, or secure zero-trust environments. Zarf bundles container registries, Helm charts, binary dependencies, and configurations into a single cryptographically signed archive file, completely removing internet reliance.

Education

Kubernetes

Training

Infrastructure

AI and GPU Computing

Vmware Tanzu (2)

  • (2022) dev.to/saintdle: Deploying Nvidia GPU enabled Tanzu Kubernetes Clusters [ADVANCED LEVEL] [COMMUNITY-TOOL] — A detailed engineering walkthrough detailing the enablement of Nvidia GPU acceleration within guest Tanzu Kubernetes Grid (TKG) clusters on vSphere. Covers vGPU profiles, driver configuration, and assigning hardware-accelerated nodes to support AI/ML and deep learning workloads.

Bare Metal

Cluster API

  • (2021) thenewstack.io: Provision Bare-Metal Kubernetes with the Cluster API [ADVANCED LEVEL] [COMMUNITY-TOOL] — A deep dive into utilizing Cluster API for declarative provisioning on physical hardware. The guide details how Cluster API Provider BYOH (Bring Your Own Host) and Metal3 bridge the gap between bare-metal lifecycle management and cloud-like declarative workflows, orchestrating native bare-metal nodes through Kubernetes CRDs.

Cloud Market

Openstack

Cluster Management

Cluster API (1)

  • (2021) ==github.com: Cluster API Helm Chart== ⭐ 58 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A community-driven Helm chart designed to package and deploy Cluster API (CAPI) resources and operators inside a management cluster. While it simplified CAPI components deployment via traditional Helm CI/CD pipelines, current production standards in 2026 have shifted entirely to official declarative setups via clusterctl or native GitOps operators, rendering this chart obsolete.
  • (2021) thenewstack.io: Cluster API Offers a Way to Manage Multiple Kubernetes Deployments [COMMUNITY-TOOL] — An introductory technical overview of the Kubernetes Cluster API (CAPI) subproject. The article clarifies how CAPI leverages the Kubernetes operator pattern to deliver declarative, API-driven cluster creation, configuration, and management across heterogeneous cloud providers, establishing a unified control plane for multi-cluster operations.

Cluster API Providers

  • (2023) ==weaveworks/cluster-api-provider-existinginfra== ⭐ 45 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Formerly known as CAPE, this Cluster API provider enabled declarative cluster bootstrap over pre-existing SSH-accessible infrastructure (bare-metal or legacy virtual machines). Following the shutdown of Weaveworks in 2024, the project was officially archived, yet it continues to serve as an engineering reference for building custom SSH-driven infrastructure control loops.

Gitops

  • (2021) piotrminkowski.com: Create and Manage Kubernetes Clusters with Cluster API and ArgoCD [COMMUNITY-TOOL] — A comprehensive technical guide showcasing the integration of Cluster API and ArgoCD to manage the infrastructure lifecycle through a GitOps model. The author demonstrates declarative target cluster definitions stored in Git, allowing ArgoCD to reconcile and trigger Cluster API operators on a management cluster for automated target cluster deployments.

Cluster Provisioning

Bare Metal (1)

  • (2026) ==poseidon/typhoon== ⭐ 2044 [HCL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Typhoon is a minimalist, secure, and performant bare-metal and multi-cloud Kubernetes distribution built entirely with Terraform. It bootstraps standard, upstream CNCF-compliant Kubernetes onto Flatcar Container Linux (and historically CoreOS), providing an excellent reference model for git-driven infrastructure without vendor lock-in.

Legacy Tooling

  • (2021) ==k8s-tew== ⭐ 311 [SHELL CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — "Kubernetes The Easy Way" (k8s-tew) was a shell wrapper and declarative configuration tool designed to bypass the complex manual configuration steps associated with bootstrapping clusters via kubeadm. With the mature advancement of declarative Cluster API patterns and standard distribution installers, this repository is now obsolete and serves only historical reference value.

Container Runtimes

Sandboxing

  • (2021) ==Kata Containers on MicroK8s== ⭐ 34 [SHELL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A community repository providing integration instructions and configurations to run Kata Containers within a Canonical MicroK8s environment. This architecture allows security teams to deploy hardware-isolated, hypervisor-sandboxed container runtimes (using QEMU or Cloud Hypervisor) inside lightweight local clusters, resolving tenant isolation concerns in multi-tenant environments.

Kubernetes Distributions

Custom Installers

  • (2026) kurl.sh [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An open-source online utility and framework designed to construct custom, production-ready, air-gapped Kubernetes distribution installers. Replicated/kurl aggregates chosen components (like CNIs, storage, and registries) into a single bash-driven installer script to facilitate simple downstream application deliveries.

Edge and Iot

  • (2026) ==K0s - Zero Friction Kubernetes== ⭐ 6239 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official open-source repository for the k0s Kubernetes distribution. Features active enterprise-grade developer tracks, offering built-in advanced networking plugins (Calico CNI, Kube-router), support for virtualized control planes, and automated bootstrapping tools without external dependencies.
  • (2023) ==xiaods/k8e== ⭐ 449 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A lightweight Kubernetes distribution (k8e, standing for "k8s easy") modeled after K3s but strictly adhering to standard upstream components. It is tailored for low-resource edge architectures, CI environments, and hobbyist networks requiring low memory profiles and simple setups.
  • (2026) Microk8s [GO CONTENT] [COMMUNITY-TOOL] — Canonical's lightweight, zero-ops Kubernetes distribution designed for developers, IoT devices, and edge computing. MicroK8s is packaged as a single snap package with automatic updates, high-availability clustering, and a modular architecture that supports one-click deployment of common add-ons like Istio, Knative, and GPU acceleration.
  • (2026) k0s [GO CONTENT] [COMMUNITY-TOOL] — Mirantis' zero-friction, single-binary Kubernetes distribution. Designed to operate across any cloud, hybrid, or edge infrastructure, k0s packages all control plane and node dependencies in a single executable, drastically simplifying lifecycle maintenance, upgrading, and operational footprint.
  • (2020) thenewstack.io: Deploy Microk8s and the Kubernetes Dashboard for K8s Development [COMMUNITY-TOOL] — A practical tutorial covering the setup of Canonical's MicroK8s on local environments coupled with the enablement of the official Kubernetes Web UI (Dashboard). The guide details how MicroK8s' single-command add-on framework simplifies cluster observability and bootstrapping for developers.
  • (2020) thenewstack.io: Deploy a Kubernetes Cluster on Ubuntu Server with Microk8s [COMMUNITY-TOOL] — A step-by-step guide outlining how to install, configure, and scale MicroK8s on an Ubuntu Server environment. It demonstrates the simplicity of setting up multi-node local clusters with high availability (dqlite-backed control planes) using snap commands.
  • (2020) infoq.com: Mirantis Announces k0s, a New Kubernetes Distribution [COMMUNITY-TOOL] — A retrospective announcement of Mirantis' launch of k0s. Highlighted its zero-friction approach, multi-master architectural patterns with a decentralized control plane, and its capability to run isolated control planes separate from application workload nodes.

Market Landscapes

  • (2022) infoworld.com: 6 Kubernetes distributions leading the container revolution [COMMUNITY-TOOL] — A comparative market overview focusing on major commercial Kubernetes platforms driving enterprise cloud-native architecture. Evaluates core features of Red Hat OpenShift, VMware Tanzu Grid, Rancher Kubernetes Engine (RKE), Mirantis Kubernetes Engine, Docker Enterprise, and Canonical Kubernetes, contrasting their operational models and target markets.

Selection Criteria

  • (2021) acloudguru.com: Which Kubernetes distribution is right for you? [COMMUNITY-TOOL] — An analytical guide comparing various Kubernetes distributions (including EKS, GKE, AKS, OpenShift, Rancher, and lightweight distributions like K3s) based on business needs, deployment environments, operational overhead, and budget. It guides enterprise architects in matching target environments with appropriate vendor or vanilla offerings.

Training and Enablement

Educational Content

  • (2024) kube.academy/pro 🌟 [COMMUNITY-TOOL] — A premier education and certification program developed by VMware Tanzu focusing on core Kubernetes principles, multi-cluster management, networking, and security. Curated for intermediate and advanced engineers, offering deep technical tracks and real-world architectures.

Interactive Labs

  • (2026) VMware hands-on Labs 🌟 [COMMUNITY-TOOL] — A highly rated, free cloud-based interactive training platform provided by Broadcom/VMware. It allows platform engineers and administrators to gain hands-on operational experience with VMware Tanzu, vSphere with Kubernetes, NSX-T, and modern multicloud management tools without needing local hardware.

Virtualization

Vmware Tanzu (3)

  • (2020) VMware vSphere 7 with Kubernetes - Project Pacific [PROPRIETARY CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A transformative enterprise initiative (Project Pacific) that embedded native Kubernetes capabilities directly into the ESXi hypervisor. vSphere with Tanzu enables virtualization administrators to manage VMs and native Tanzu Kubernetes Grid (TKG) guest clusters inside a single vSphere Client interface, converging IT operations.
  • (2020) cormachogan.com: A first look at vSphere with Kubernetes in action [COMMUNITY-TOOL] — A hands-on architectural exploration of the early vSphere with Kubernetes implementation. The post walks through supervisor cluster enablement, native vSphere Pods execution, storage class integration with VMware CNS (Cloud Native Storage), and basic network policies.
  • (2020) cormachogan.com: Building a TKG Cluster in vSphere with Kubernetes [COMMUNITY-TOOL] — A deep technical guide demonstrating how to declare and bootstrap Tanzu Kubernetes Grid (TKG) workload clusters (guest clusters) inside a vSphere supervisor cluster. Explains the underlying declarative custom resource definition (CRD) configurations matching Cluster API mechanics.

Kubernetes (1)

Operations

Productivity

  • (2021) Kubernetes productivity tips and tricks 🌟 [COMMUNITY-TOOL] — A practitioner's guide to enhancing CLI-based Kubernetes productivity. It explores advanced setups such as custom shell autocompletion, kubectx/kubens utilities, smart aliases, and log-tailing helpers designed to reduce cognitive overhead during real-time incident responses.

Kubernetes Platforms

Mirantis

Enterprise

  • (2020) Mirantis Docker Enterprise 3.1+ with Kubernetes [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Formerly Docker Enterprise, Mirantis Kubernetes Engine (MKE) provides enterprise-ready cluster deployment capabilities utilizing either Kubernetes or Swarm orchestrators. It features integrated identity management, safe private image registries, and granular role-based security tooling.

Rancher

Multi-cluster

  • (2026) Rancher: Enterprise management for Kubernetes [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Rancher is a unified platform for managing multi-cluster, heterogeneous Kubernetes deployments across diverse cloud providers and bare metal hosts. It simplifies operational management by providing centralized authentication, unified RBAC access, structured audit logs, and simplified Helm catalog deployments.

Red Hat Openshift

Enterprise (1)

  • (2026) Openshift Container Platform [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Red Hat OpenShift is a premier enterprise-grade hybrid cloud Kubernetes application platform. It adds out-of-the-box developer tooling, integrated security standards, cluster virtualization, internal registry configurations, and Operator-based life cycle management directly over raw Kubernetes.

Networking

CNI Plugins

Overlay Networks

  • (2024) ==github: Weave Net - Weaving Containers into Applications== ⭐ 6612 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Weave Net is a widely adopted container CNI plugin that creates an autonomous peer-to-peer overlay network with no external database requirements. The repository was archived by Weaveworks in 2024, prompting enterprise engineering teams to migrate to active, high-performance CNIs like Cilium (eBPF-driven) or Calico.

Service Mesh

Vmware Tanzu (4)

  • (2020) blogs.vmware.com: VMware Tanzu Service Mesh, built on VMware NSX is Now Available! [ADVANCED LEVEL] [COMMUNITY-TOOL] — Announcement of VMware Tanzu Service Mesh (TSM), an Istio-based commercial service mesh integrated with VMware NSX. TSM delivers end-to-end traffic management, zero-trust security policies, cross-cluster connectivity, and deep API observability across hybrid and multi-cloud Kubernetes deployments.

Observability

Dashboards

Developer Tooling

  • (2023) ==vmware-tanzu/octant== ⭐ 6247 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Octant was an open-source, extensible developer dashboard designed to visualize local and remote Kubernetes cluster states, resource dependencies, and logs. Project development was officially archived in 2023 as developers shifted to other open-source or commercial alternatives like Lens, OpenLens, and K9s.

Provisioning

Ansible

Advanced Infrastructure

  • (2024) ==krd== ⭐ 40 [SHELL/ANSIBLE CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The Kubernetes Reference Deployment (KRD) leverages Ansible playbooks and shell scripts to automate multi-node cluster provisioning with advanced network architectures, hardware acceleration (SR-IOV), nested VM hypervisors, and distributed storage engines.

Development Environments

  • (2024) ==github.com/bluxmit: Kubespray Workspace== ⭐ 1361 [DOCKER/SHELL CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A containerized development sandbox and workspace designed to streamline the execution of Kubespray and Ansible playbooks, ensuring dependency insulation and tool consistency across local machine environments.

Enterprise Playbooks

  • (2026) ==Kubespray== ⭐ 18556 [PYTHON/ANSIBLE CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The industry standard Ansible automation framework for deploying enterprise-ready, production-grade clusters. Combining Kubeadm with highly flexible, battle-tested playbooks, it handles network policy deployment (CNIs like Calico/Cilium), storage classes, node lifecycle operations, and multi-distribution OS configurations.

Guides

  • (2021) adamtheautomator.com/kubespray: Conquer Kubernetes Clusters with Ansible Kubespray [COMMUNITY-TOOL] — A practical troubleshooting handbook detailing how to configure Ansible inventories, override default deployment parameters, and run Kubespray deployment playbooks successfully against physical or virtual hosts.
  • (2020) redhat.com: An introduction to Kubespray [COMMUNITY-TOOL] — An introductory Red Hat guide summarizing how Kubespray leverages Ansible to abstract system-level provisioning tasks, allowing teams to declare cluster configurations and scaling strategies across mixed on-premises and multi-cloud environments.

Media

Roles

  • (2026) ==Ansible Role - Kubernetes (Jeff Geerling)== ⭐ 626 [YAML CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Jeff Geerling's highly popular, community-standard Ansible role designed to automate core system dependencies, swap disabling, package installations, and initial Kubeadm commands on Debian and RedHat distributions, simplifying playbooks deployment.

Bare Metal (2)

Comparison

Scale Stories

  • (2020) linecorp.com: Building Large Kubernetes Clusters with Caravan [ADVANCED LEVEL] [COMMUNITY-TOOL] — An engineering blog post by Line Corporation detailing Caravan, their proprietary bare-metal bare-metal lifecycle orchestration tool. Covers bare-metal host discovery, automated OS deployments, and high-availability operations handling thousands of production nodes.

Strategy

  • (2021) containerjournal.com: When Kubernetes-as-a-Service Doesn’t Cut It [COMMUNITY-TOOL] — Analyzes the operational and economic conditions where off-the-shelf Kubernetes-as-a-Service platforms fall short. Highlights constraints around custom hardware drivers, performance requirements, data sovereignty, and custom routing options that force organizations toward self-managed bare-metal solutions.
  • (2020) containerjournal.com: Deploying Kubernetes on Bare Metal [COMMUNITY-TOOL] — An architecture-level examination of building out Kubernetes clusters directly on raw physical hardware. Explores the complexities of dynamic volume provisioning, API load balancing, manual host bootstrapping, and CNI integration compared to cloud environments.

Bootstrapping

AWS

  • (2022) ==Kubernetes The Hard Way: AWS Edition== ⭐ 668 [MARKDOWN CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An educational repository porting 'Kubernetes the Hard Way' directly onto AWS infrastructure. Step-by-step documentation on manually creating VPCs, Security Groups, EC2 nodes, and manually compiling and executing cluster daemons.

Container Runtimes (1)

Core Engine

  • (2026) ==Kubernetes Cluster with Kubeadm== ⭐ 3981 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The standard bootstrapping engine for establishing conformant clusters, maintained by Kubernetes SIG-Cluster-Lifecycle. It abstracts certificate generation, etcd cluster building, and node onboarding into simplified kubeadm init and kubeadm join commands. It serves as the foundation for higher-level platform controllers.

Guides (1)

Learning

  • (2026) ==Kelsey Hightower: kubernetes the hard way== ⭐ 48654 [MARKDOWN/SHELL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kelsey Hightower's legendary guide for bootstrapping highly available clusters manually without automated installers. It details SSL/TLS certificate generation, etcd cluster builds, and control plane daemon setup (kube-apiserver, kube-scheduler, etc.), representing the gold standard for understanding low-level Kubernetes engineering.

Ubuntu

Virtualbox

Declarative Infrastructure

Core Engine (1)

  • (2026) ClusterAPI [GO/MARKDOWN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — The home page of Cluster API (CAPI), a Kubernetes SIG project that implements declarative API-driven cluster management. Utilizing custom controllers and CRDs, CAPI treats clusters, machines, and control planes as native Kubernetes resources, enabling unified multi-cloud infrastructure automation.

Deployment Tools

AWS (1)

  • (2026) ==GitHub: Kubernetes Cluster with Kops== ⭐ 16625 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kubernetes Operations (kops) is a production-grade orchestration tool designed to configure, scale, and manage highly available clusters on public cloud environments. Its declarative structure manages cloud instances, security groups, route tables, and internal etcd scaling configurations directly, primarily focusing on AWS.

Comparison (1)

Security

  • (2020) blog.ivnilv.com: Rotating Kops Etcd Certificates [ADVANCED LEVEL] [COMMUNITY-TOOL] — A technical troubleshooting guide mapping out the precise sequence required to rotate internal etcd client and peer certificates within a running, Kops-managed cluster. Addresses avoidance of control plane downtime and potential etcd split-brain scenarios during CA transitions.

Gitops (1)

Legacy Tools

  • (2026) ==Weave Kubernetes System Control - wksctl== ⭐ 389 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — Weaveworks' Weave Kubernetes System Control (wksctl) was a GitOps-based tool for cluster creation, configuring infrastructure directly from a declared state stored in git. Curator Insight vs Live Grounding: Following Weaveworks' operational shutdown, this tool has been archived and is considered historical legacy.

Infrastructure-as-code

Exoscale

  • (2020) Autoscalable Kubernetes cluster at Exoscale, using Packer and Terraform ⭐ 2 [HCL/PACKER CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An IaC blueprint using Packer and Terraform to deploy an auto-scaling cluster on Exoscale with CRI-O. Curator Insight vs Live Grounding: The repository is now inactive, but serves as a historical example of orchestrating custom cloud pools with native container engines.

Security (1)

Compliance

Vulnerability Management

  • (2022) ==MicroK8s & Kubernetes security benchmark from CIS== ⭐ 17 [SHELL CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An open-source tool adapted from Aqua Security's kube-bench designed to validate Canonical MicroK8s clusters against the Center for Internet Security (CIS) Kubernetes Benchmark. It provides granular compliance auditing of control plane configurations, API security settings, and node compliance profiles directly inside lightweight development or edge clusters.

Storage

Stateful Applications

Legacy Tooling (1)

  • (2019) Stateful Kubernetes-In-a-Box with Kontena Pharos [ADVANCED LEVEL] [COMMUNITY-TOOL] — A technical blog post detailing stateful storage solutions in Kubernetes using Pure Service Orchestrator on Kontena Pharos, a lightweight enterprise distribution. With Kontena Pharos discontinued and Pure Storage workflows fully migrated to standard CSI plugins (like Portworx), this remains of historical interest only.

💡 Explore Related: OCP 4 | Container Managers | Openshift

🔗 See Also: About | Postman

Reference in New Issue View Git Blame Copy Permalink