Open-source projects extend Kubernetes cluster capabilities. This topic lists the major open-source projects used in Container Service for Kubernetes (ACK).
|
Category |
Project name |
Description |
Project address |
References |
|
Key components |
Kubernetes Cloud Controller Manager for Alibaba Cloud |
Balances application traffic and manages node route entries. |
||
|
Networking |
Terway CNI Network Plugin |
An ACK network plug-in that sets up container networks by associating Alibaba Cloud ENIs with pods. |
||
|
NGINX Ingress Controller |
Provides Layer 4 and Layer 7 load balancing as a reverse proxy. |
|||
|
ExternalDNS |
Provides dynamic DNS resolution through Alibaba Cloud DNS PrivateZone. |
|||
|
Storage |
Alibaba Cloud Kubernetes CSI plug-in |
An ACK volume plug-in that manages the volume lifecycle. |
||
|
Alibaba Cloud Kubernetes FlexVolume plug-in |
An ACK volume plug-in for mounting and unmounting volumes (Kubernetes 1.16 and earlier). |
|||
|
Alibaba Cloud disk volume provision controller |
Creates and deletes disk volumes (Kubernetes 1.16 and earlier). |
|||
|
Resource optimization |
Node-Resource-Manager |
Manages nodes and monitors components. |
None |
|
|
Elasticity |
Kubernetes-CronHPA-Controller |
Performs scheduled horizontal pod scaling. |
||
|
Kubernetes Autoscaler |
Performs horizontal node scaling. |
|||
|
Security |
KMS provider plugin for Alibaba Cloud |
Encrypts disk-stored Kubernetes Secrets with Key Management Service (KMS). |
||
|
Kube2ram |
Deploys DaemonSets that proxy ECS-linked Resource Access Management (RAM) roles, mapping different RAM roles to ACK pods. |
|||
|
ACK RAM Authenticator for Kubernetes |
Enables the API server to verify user identities based on assumed RAM roles. |
Use RAM roles to perform identity verification for ACK clusters |
||
|
ACK Secret Manager |
Imports and synchronizes keys from KMS Secrets Manager in real time. |
|||
|
SGX-Device-Plugin |
A Kubernetes device plug-in that expands Enclave Page Cache (EPC) memory on SGX devices for confidential computing. |
|||
|
Migration |
Derrick |
An S2I tool that inspects workspaces and generates Dockerfiles and templates. |
||
|
Velero |
A cloud-native tool for backing up, restoring, and migrating applications. |
|||
|
Image Build Specification of Alibaba Cloud Container Service for Kubernetes (ACK) |
Creates custom container images. |
|||
|
AI |
Arena |
A CLI for managing the full machine learning lifecycle: data preparation, model development, training, and prediction. |
||
|
GPU Sharing Scheduler Extender in Kubernetes |
The first GPU sharing scheduler in the industry. |
|||
|
Fluid |
A Kubernetes-native distributed dataset orchestration and acceleration engine. |
|||
|
Application management |
Kube-eventer |
Collects Kubernetes events and sinks them to services such as Kafka, MySQL, DingTalk, and Lark. |
||
|
Alibaba-Cloud-Metrics-Adapter |
Collects metrics for pod scaling. |
|||
|
OpenKruise |
Automates application management with in-place upgrades, sidecar management, and reliable deployments. |
|||
|
Open Application Model Specification |
Provides standards and high-level abstractions for defining and managing cloud-native applications. |
|||
|
KubeVela |
An extensible platform engine for application management. |
|||
|
Scheduling |
Scheduler Plugins |
Schedulers extended from the Kubernetes scheduling framework, supporting scenarios such as AI-assisted and big data computing. |