mirror of
https://github.com/Katakate/k7.git
synced 2026-09-21 09:33:19 +00:00
13fafe0997
Per-key node pins, k7d-fc pause/resume/exec, and HA-soak fixes. Playbook pins k7d 0.7.0. GitHub .deb, Launchpad PPA, and PyPI k7-sdk are 0.4.0.
1.9 KiB
1.9 KiB
Project Roadmap
Where K7 is headed — for contributors and operators.
Current focus
Release engineering: keep the apt/PPA, GHCR k7-api, and PyPI k7-sdk
pipelines current with main (PPA, GitHub .deb, and PyPI k7-sdk are 0.4.0).
Recently shipped
- Multi-node Ansible, Longhorn topology, HA / cross-node tests
- Cilium CNI + FQDN egress
- API + SDK parity: pause / resume / fork
- Snapshot lifecycle + GC; restore from VolumeSnapshot
- CLI → API by default;
k7 api/k7 dev api rebuild - Docker-in-VM sidecar + bench harness
- First-class
--docker(guest dockerd on k7d / k7d-fc; docker-vehicle on Kata) - Firecracker jailer
k7d-fcbackend (k7d driving stock Firecracker + jailer)- Python SDK as
k7-sdk/k7_sdk(katakatedeprecated) k7dbackend install path (publicKatakate/k7dGitHub Releases; playbook pin 0.7.0)- HTTPS-by-default for
k7-api(Caddy sidecar, cluster CA) - Network security hardening: cluster-wide sandbox→platform
isolation, opt-in sandbox ingress /
--expose-port, Hubble, and a source-CIDR allowlist for the API NodePort. Tetragon was evaluated and rejected
Next goals
- PPA / GHCR / PyPI cut of the unreleased work (HTTPS,
--docker,k7d-fc) - Optional macOS CLI artifacts (tarball / Homebrew) — after the above
Future work
- GPU passthrough support
- Cross-node mobility of snapshots / forks for the
k7dbackend (kqlalready moves state across nodes via Longhorn) - AppArmor integration
- CI/CD deployment tests on every public tag
- TEE support; custom rootfs; persistent in-API interpreter
How to contribute
- Open a Discussion or Issue
- Reference the roadmap item
- See
CONTRIBUTING.md
Last updated: September 2026