System Architecture
The Kube Ready Box product boundary is a verified OS image. A container runtime, Kubernetes, kubeadm/kubelet/kubectl, and a CNI are not bundled; the consuming cluster project installs them.
Repository layers
| Layer | Responsibility |
|---|---|
| Packer definition | Ubuntu release, AMD64/ARM64, VirtualBox/VMware, and ext4/XFS matrix |
| OS contract | kernel modules, sysctl, limits, packages, and boot-time disk expansion |
| Capability modules | network, storage, security, time-sync, and observability readiness |
| Verification | provider boot tests and machine-readable tuning evidence |
| Release evidence | trace validated provider artifacts and their build inputs |
Invariants
- Kubernetes-ready is distinct from Kubernetes-preinstalled.
- ext4 and XFS remain separate artifacts because their behavior differs.
- AMD64 and ARM64 follow one OS contract with documented provider exceptions.
- Template validation does not replace real VM runtime evidence.