OpenKruise/Kruise

English | 简体中文

What is NEW!
May 20th, 2021. Kruise v0.9.0 is RELEASED! It provides great features such as ContainerRecreate and DeletionProtection, please check the CHANGELOG for details.
Mar 4th, 2021. Kruise v0.8.0 is RELEASED! It provides refactoring SidecarSet, Deployment hosted by UnitedDeployment, and a new kruise-daemon component which supports image pre-download, please check the CHANGELOG for details.
Dec 16th, 2020. Kruise v0.7.0 is RELEASED! It provides a new CRD named AdvancedCronJob, promotes AdvancedStatefulSet to v1beta1 and a few features in other controllers, please check the CHANGELOG for details.

Introduction

OpenKruise (official site: https://openkruise.io) is now hosted by the Cloud Native Computing Foundation (CNCF) as a Sandbox Level Project. It consists of several controllers which extend and complement the Kubernetes core controllers for workload and application management.

As of now, Kruise mainly offers these controllers:

CloneSet: CloneSet is a workload that mainly focuses on managing stateless applications. It provides a rich set of features for more efficient, deterministic and controlled management, such as in-place update, specified Pod deletion, configurable priority/scatter based update, preUpdate/postUpdate hooks, etc. This post provides more details about why CloneSet is useful.
Advanced StatefulSet: An enhanced version of default StatefulSet with extra functionalities such as in-place update, pause and maxUnavailable.
SidecarSet: A controller that injects sidecar containers into the Pod spec based on the Pod selectors. The controller is also responsible for upgrading the sidecar containers.
Advanced DaemonSet: An enhanced version of default DaemonSet with extra upgrade strategies such as partition, node selector, pause and surging.
UnitedDeployment: This controller manages application Pods spread in multiple fault domains by using multiple workloads.
BroadcastJob: A job that runs Pods to completion across all the nodes in the cluster.
AdvancedCronJob: An extended CronJob controller, currently its template supports Job and BroadcastJob.
ImagePullJob: Help users download images on any nodes they want.
ContainerRecreateRequest: Provides a way to let users restart/recreate one or more containers in an existing Pod.
Deletion Protection: Provides a safety policy which could help users protect Kubernetes resources and applications' availability from the cascading deletion mechanism.

Key Features

In-place update

In-place update provides an alternative to update container images without deleting and recreating the Pod. It is much faster compared to the recreate update used by the native Deployment/StatefulSet and has almost no side effects on other running containers.
Sidecar containers management

The Sidecar containers can be simply defined in the SidecarSet custom resource and the controller will inject them into all Pods matched. The implementation is done by using Kubernetes mutating webhooks, similar to what istio does. However, SidecarSet allows you to explicitly manage your own sidecars.
Multiple fault domains deployment

A global workload can be defined over multiple fault domains, and the Kruise controller will spread a sub workload in each domain. You can manage the domain replicas, sub workload template and update strategies uniformly using the global workload.
Image pre-download

Help users download images on any nodes they want.
Container recreate/restart

Help users restart/recreate one or more containers in an existing Pod.
...

Quick Start

For a Kubernetes cluster with its version higher than v1.13, you can simply install Kruise with helm v3.1.0+:

# Kubernetes 1.13 and 1.14
helm install kruise https://github.com/openkruise/kruise/releases/download/v0.9.0/kruise-chart.tgz --disable-openapi-validation

# Kubernetes 1.15 and newer versions
helm install kruise https://github.com/openkruise/kruise/releases/download/v0.9.0/kruise-chart.tgz

Note that installing this chart directly means it will use the default template values for the kruise-manager. You may have to set your specific configurations when it is deployed into a production cluster or you want to configure feature-gates.

For more details, see installation doc.

Documentation

You can view the full documentation from the OpenKruise website.

We also provide tutorials for ALL Kruise controllers to demonstrate how to use them.

Users

Registration: Who is using Kruise

Alibaba Group, Ant Group, DouyuTV, Sto, Boss直聘
hangyinxiaofei, vanyitech, Dmall, Bringg, 佐疆科技
Lyft, Ctrip, 享住智慧, VIPKID, zhangmen
xiaohongshu, bixin, 永辉科技中心, 跟谁学, 哈啰出行
Spectro Cloud, ihomefnt, Arkane Systems, Deepexi, 火花思维
OPPO, Suning.cn

Contributing

You are warmly welcome to hack on Kruise. We have prepared a detailed guide CONTRIBUTING.md.

Community

Active communication channels:

Slack: Channel in Kubernetes Slack
Mailing List: todo
Dingtalk Group(钉钉讨论群)

License

Kruise is licensed under the Apache License, Version 2.0. See LICENSE for the full license text.

veophi/kruise