Distro-Features¶
Feature-Matrix der Cluster-Blöcke. SDP-Komponenten (Cilium, Ingress, Velero, …): SDP Features.
| Fähigkeit | k3s-server | k8s-1.27 |
|---|---|---|
| Laufzeit | Pod auf Host-Cluster | systemd/k3s auf Linux-Hosts |
| Datastore | embedded etcd / SQLite / external | embedded etcd (k3s Default auf Hosts) |
| Worker | Join von außen (Agents) | Inventory + join-cluster |
| API-Edge | Gateway / NGINX-Passthrough / Cilium-LB | Host-IP + TLS SAN / optional ServiceLB |
| OIDC | ja | ja |
| Audit-Logs | Sidecar → VictoriaLogs | Host-Journal / apiserver |
| Secrets encryption | secretbox + Rotate-Actions | Host-/Disk-Ebene |
| etcd-Snapshots | PVC + optional S3 | Host-Pfad / externes Backup |
| Air-gap | Image + Pull-Secrets | Private Registry Mirrors |
| Polycrate API | K8sControlplane | Cluster/Region am Workspace |
| Multi-Master HA | nein (Single-Pod) | ja (3 Controlplanes) |
Host-Härtung und journald/auditd-Collector auf Foundation-Hosts: ayedo/linux/hardening — Logs ingestieren.
Block-Versionen und Defaults: Polycrate Hub.