kubectl-operator
sig-security
Our great sponsors
| kubectl-operator | sig-security | |
|---|---|---|
| 9 | 4 | |
| 112 | 155 | |
| 6.3% | 7.1% | |
| 6.9 | 6.1 | |
| 1 day ago | about 2 months ago | |
| Go | Python | |
| Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
kubectl-operator
-
Building a Kubernetes Operator with the Operator Framework
Kubernetes Operators simplify the management of complex applications on Kubernetes. In this guide, we'll walk through creating a simple Kubernetes Operator using the Operator Framework. We'll also cover setting up a local Kubernetes cluster with KIND (Kubernetes in Docker) and deploying the Operator to the KIND cluster.
- Open source toolkit to manage Kubernetes native applications
-
What do you think about Terraform for Kubernetes ecosystem
There's a kubectl extension for it too. https://github.com/operator-framework/kubectl-operator
- Kubernetes Operator
-
Writing a Kubernetes Operator
Since Go got generics, working with the Kubernetes API could become far more ergonomic. It's been pulling teeth until now. I'm eager to see how the upstream APIs change over time.
In the mean time, one of the creators of the Operator Framework[0] built a bunch of useful patterns using generics that we used to build the SpiceDB Operator[1] called controller-idioms[2].
Does anyone know of other efforts to improve the status quo?
[0]: https://operatorframework.io
[1]: https://github.com/authzed/spicedb-operator
[2]: https://github.com/authzed/controller-idioms
-
is there a way to set expiry date for k8s rbac setting?
There are many frameworks, like the Operator Framework (https://operatorframework.io/) to the MetaController (https://github.com/metacontroller/metacontroller) to KubeBuilder(https://github.com/kubernetes-sigs/kubebuilder) to the Kubernetes Operator Framework (kopf, https://kopf.readthedocs.io/en/stable/), among others.
- What is a good resource to learn how to create and use custom Kubernetes operator?
-
How OLM helps to install and upgrade operators
Operator lifecycle manager (OLM) is a Kubernetes feature & is part of Operator framework which provides tools that helps in the development and management of operators. OpenShift 4.x is build using different operators that manages cluster components like api-server, etcd, authentication, OAuth, ingress, etc. OpenShift makes use of OLM to install these operators as part of cluster build & OLM comes by default with OpenShift. OLM is an operator itself and understanding how it manages the operator lifecycle using different CRD’s & its flow is important, which I have explained in my article.
-
Operators are so much easier to click-install -- how do I get them back out as manifests?
The documentation gives you all available options, but many of them are optional. If you know the package name of the operator (which you can get either via oc get packagemanifests or kubectl operator list-available from the kubectl plugin all you really need is:
sig-security
- Hallo Reddit! Ich bin Constanze Kurz, Sprecherin des CCC. Ask me anything!
-
is there a way to set expiry date for k8s rbac setting?
If you want to suggest extending the core k8s with this object, I think the place for this work would be in the K8s Security SIG (https://github.com/kubernetes/sig-security).
- sig-security/CNCF_Kubernetes_Policy_Management_WhitePaper_v1.pdf at main · kubernetes/sig-security
-
Announcing the Kubernetes Policy Management Paper by Kubernetes Security SIG and Policy WG
The whitepaper itself is available here as a PDF and starts with:
What are some alternatives?
controller-idioms - Generic libraries for building idiomatic Kubernetes controllers
metacontroller - Writing kubernetes controllers can be simple
gitops-catalog - Tools and technologies that are hosted on an OpenShift cluster
spicedb-operator - Kubernetes controller for managing instances of SpiceDB
databricks-kube-operator - A Kubernetes operator to enable GitOps style deploys for Databricks resources
argocd-operator - A Kubernetes operator for managing Argo CD clusters.
kubebuilder - Kubebuilder - SDK for building Kubernetes APIs using CRDs
spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications
operator-sdk - SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
kubectl-neat - Clean up Kubernetes yaml and json output to make it readable
kubeplus - Kubernetes Operator to create multi-instance SaaS from Helm charts using Kubernetes-native APIs