Operators & CRDs
10 articles from official documentation
Mastering Custom Resources in Kubernetes: A Guide for Operators
Custom resources in Kubernetes allow you to extend the API and tailor it to your needs. By combining them with custom controllers, you create a powerful declarative API that can manage complex applications. Dive into how this works and what you need to watch out for in production.
- →Understand that Custom Resources extend the Kubernetes API beyond default capabilities.
- →Utilize CustomResourceDefinitions (CRDs) for quick and easy custom resource creation.
Forensic Container Checkpointing on Amazon EKS: What You Need to Know
Forensic container checkpointing is a game changer for stateful applications running on Amazon EKS. By leveraging the Kubelet Checkpoint API and CRIU, you can capture a container's full runtime state seamlessly. This article dives into the mechanics and real-world implications of implementing this powerful feature.
- →Utilize the Kubelet Checkpoint API to create container checkpoints via HTTP requests.
- →Leverage CRIU to capture a container's full runtime state, including memory and network connections.
Why Your Controller's Cache Keeps the API Server Running Smoothly
Ever wonder how your Kubernetes controller can handle hundreds of calls per second without crashing the API server? The secret lies in the controller-runtime's local cache mechanism, which uses a combination of informers and stores to optimize data access. Dive in to understand the mechanics behind this powerful feature.
- →Understand GVK as it uniquely identifies API types in Kubernetes.
- →Leverage informers to maintain a local cache of resources for efficient data access.
Taming Secret Sprawl in Multi-Account Kubernetes with External Secrets Operator
Secret sprawl can quickly become a nightmare in multi-account Kubernetes environments. The External Secrets Operator (ESO) allows you to synchronize secrets from Bitwarden directly into Kubernetes, ensuring your applications always have the credentials they need without manual intervention.
- →Utilize the External Secrets Operator to synchronize secrets from Bitwarden into Kubernetes seamlessly.
- →Set the `refreshInterval` parameter to control how often secrets are updated, with a default of 15 minutes.
Mitigating Staleness in Kubernetes Controllers: What You Need to Know
Kubernetes v1.36 introduces key features to tackle staleness in controllers, directly impacting your cluster's reliability. By leveraging atomic FIFO processing and the new ConsistencyStore, controllers can ensure they act on the most current data. This is a game-changer for production environments where stale data can lead to cascading failures.
- →Enable staleness mitigation using the StaleControllerConsistency feature gate for improved reliability.
- →Utilize the ConsistencyStore to ensure controllers only act on the latest resource versions.
Building a Memcached Operator with Go: A Practical Guide
Operators are a powerful way to extend Kubernetes, and building one with Go can streamline your application management. This guide walks you through creating a Memcached operator, focusing on the Custom Resource Definition (CRD) and the controller's role in reconciliation.
- →Initialize your operator project with a clear domain using the `operator-sdk init` command.
- →Define your CRD with specific fields like `size` and `containerPort` to manage Memcached instances effectively.
Mastering Admission Control in Kubernetes: What You Need to Know
Admission control is a critical gatekeeper in Kubernetes, ensuring that only valid requests reach your cluster. Understanding the difference between mutating and validating admission controllers can save you from costly misconfigurations.
- →Understand the two phases of admission control: mutating and validating.
- →Configure admission plugins using `--enable-admission-plugins` and `--disable-admission-plugins`.
CustomResourceDefinitions: Extending Kubernetes for Your Needs
Unlock the power of Kubernetes by extending its API with CustomResourceDefinitions (CRDs). Learn how to create custom resources that fit your application’s specific requirements, including namespaced and cluster-scoped options.
- →Create a CustomResourceDefinition to extend the Kubernetes API with your own resources.
- →Specify whether your custom resource is namespaced or cluster-scoped using the `spec.scope` field.
Mastering the Operator Pattern in Kubernetes
Unlock the power of Kubernetes with Operators, the game-changer for managing complex applications. Learn how custom resources and control loops work together to automate your workflows.
- →Utilize custom resources to extend Kubernetes capabilities.
- →Implement control loops to automate application management.
Headlamp 2025: Transforming Kubernetes Management
Headlamp is redefining how we manage Kubernetes clusters by providing an application-centric view through Projects. This feature groups related resources across multiple namespaces and clusters, streamlining your workflow.
- →Utilize Projects to group related resources across multiple namespaces and clusters.
- →Leverage the side-by-side cluster comparison feature for better workload understanding.
Industry-standard certifications built by the people behind Linux and Kubernetes. Earn the CKA — the gold standard Kubernetes administrator cert. OpsCanary readers get 30% off year-round with code OPSCANARY3.
Get CKA certified →Get the daily digest
One email. 5 articles. Every morning.
No spam. Unsubscribe anytime.