Introducing Kuben: a Kubernetes PaaS in a single binary
Kuben 1.0 is out. One Rust binary turns a Kubernetes cluster into a platform your team can use. Here is what it is, what it is not, and why we built it this way.
Blog
Why Kuben ships as one binary
A PaaS is usually a fleet of services. Kuben is one process with roles. This post explains the architecture behind that choice, and what happens when you want three replicas.
Leader election without trusting clocks
Running several Kuben replicas meant deciding which one reconciles. We built the election on a Kubernetes Lease and compare-and-swap, and made sure clock skew can never produce two leaders.
How we release Kuben: attested, scanned, and built from the bytes we checked
Kuben's release pipeline builds five binaries without a cache, checksums and attests them, builds the image from those exact bytes, scans it before pushing, and embeds a dependency list in every binary. Here is why each step is there.