search

giantswarm / roadmap

Giant Swarm Product Roadmap
https://github.com/orgs/giantswarm/projects/273
Apache License 2.0
3 stars 0 forks source link

PoC: Karpenter and Crossplane for managing IAM resources #3102

Closed T-Kukawka closed 8 months ago

T-Kukawka commented 10 months ago

As discussed during sig-architecture, we would like to test deployment of Crossplane in one of our CAPA MCs (golem) in order to prove the presented concept. The concept includes enabling IAM, S3 and SQS in crossplane aws provider.

The availability of mentioned crossplane features will enable Phoenix to deploy Karpenter as an app-bundle that besides the actual app-required deployment will also include the needed IAM Roles to be deployed on the AWS provider.

If this proves to be successful over time, especially taking into account crossplane performance based on the number of CRDs, we will continue the journey of managing provider resources via crossplane. This apporach will allow us to couple the needed cloud provider resources with the actual apps, instead of managing e.g. IAM Roles in a separate operators that has proven to be harder to manage over time.

### Tasks
- [ ] https://github.com/giantswarm/roadmap/issues/3103
- [x] Create app-bundle with Karpenter and Crossplane Manifests
- [x] Test and validate the successful deployments of the setup
- [x] Monitor crossplane performance over time
T-Kukawka commented 8 months ago

that part is done, we have a follow up