github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-13 02:10:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
f9e994778aacea0aed51d4f7ccded9c643a72121
awesome-kubernetes/v2-docs/kubernetes-operators-controllers.md

134 KiB
Raw Blame History

Kubernetes Operators and Controllers

!!! info "Architectural Context" Detailed reference for Kubernetes Operators and Controllers in the context of The Container Stack.

Table of Contents

  1. AI Infrastructure
  1. Application Delivery
  1. Architectural Foundations
  1. CICD Pipeline
  1. Cloud Native Infrastructure
  1. Data and Databases
  1. Data Management
  1. Developer Experience
  1. Extensibility and Development
  1. FinOps and Autoscaling
  1. Infrastructure
  1. Infrastructure and Hardware
  1. Kubernetes GitOps and Packaging
  1. Media
  1. Networking
  1. Observability
  1. Operations and Reliability
  1. Orchestration
  1. Platform Engineering
  1. Reliability
  1. Resources
  1. Security
  1. Security and Compliance
  1. Security and Identity
  1. Storage
  1. Workload Management

AI Infrastructure

Hardware Orchestration

NVIDIA Operators

  • (2025) NVIDIA GPU Operator ⭐ 2739 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — Curator Insight: Kubernetes operator designed to automate the management of NVIDIA software components on nodes. Live Grounding: Provisions GPU drivers, container runtimes, device plug-ins, and monitoring tools automatically, ensuring consistent access to hardware acceleration.

Application Delivery

Continuous Deployment

Auto-Upgrade

Operators
  • (2024) ==Keel 🌟== ⭐ 2714 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Keel is a lightweight CD daemon that monitors container registries and automatically updates deployments, statefulsets, and helm releases without needing external pipeline orchestration.

Packaging

SaaS Provisioning

Operators (1)

Architectural Foundations

Kubernetes Tools

General Reference

CICD Pipeline

Kubernetes and Containers

Self-Hosted Infrastructure

  • (2020) ==github.com/actions/actions-runner-controller 🌟== ⭐ 6298 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Official Kubernetes operator designed to manage self-hosted GitHub Actions runner infrastructure dynamically. Integrates natively with Horizontal Pod Autoscaler (HPA) targets to scale runner deployments in response to webhook event metrics.

Cloud Native Infrastructure

Kubernetes Extension

Custom Controllers

  • (2021) vivilearns2code.github.io: Writing Controllers For Kubernetes Resources [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — A deep-dive technical exposition on writing direct controllers using the Client-Go library. Explains informer caching, event-filtering, and work queue routing structures. This resource remains highly valuable in 2026 for platform developers seeking to implement low-latency reconcile loops without high-level framework wrappers.

Operator Best Practices

  • (2021) openshift.com: 7 Best Practices for Writing Kubernetes Operators: An SRE Perspective [ADVANCED LEVEL] [COMMUNITY-TOOL] — An SRE-centric architectural checklist offering critical best practices for writing production-ready Kubernetes operators. Emphasizes design constraints such as idempotency, API versioning, and status subresources. Current production logs in 2026 prove these patterns are essential to avoid cascading API server rate-limit failures.

Operator SDK

  • (2023) linuxera.org: Writing Operators using the Operator Framework SDK [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — A detailed technical guide explaining how to scaffold and manage the operational lifecycle of operators using the CNCF Operator Framework SDK. It highlights the differences between Go, Ansible, and Helm-based operator pipelines. Reconciled with 2026 standards, the SDK remains the gold standard for platform teams enforcing GitOps standards.

Operators Framework

  • (2023) bmc.com: What Is a Kubernetes Operator? [COMMUNITY-TOOL] — A comprehensive architectural primer detailing the design patterns undergirding Kubernetes Operators. It contrasts standard declarative controllers with domain-specific, active state reconciliation. By 2026, operators have solidified their role as the industry standard for managing stateful applications natively within the Kubernetes control plane.

Operators Go

  • (2022) dev.to/hkhelil: Building a Kubernetes Operator with an NGINX CRD [GO CONTENT] [COMMUNITY-TOOL] [GUIDE] — A step-by-step developer tutorial building an NGINX web server operator from scratch. It guides the reader through CRD definitions and controller structures, making it an excellent practical entry point for understanding the reconciliation model in a hands-on way.

Operators Python

  • (2021) brennerm.github.io: Kubernetes operators with Python #1: Creating CRDs [PYTHON CONTENT] [COMMUNITY-TOOL] [GUIDE] — A hands-on developer tutorial detailing custom resource definition (CRD) creation and controller loops implemented in Python using the Kopf framework. Provides an excellent entry point for data engineers and system administrators who favor Python over Go. While Go remains dominant in 2026, Kopf provides an stable alternative for automation tasks.

Operators Rust

  • (2023) metalbear.co: Writing a Kubernetes Operator [RUST CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — An innovative blueprint illustrating operator design with Rust and the kube-rs framework. In 2026, Rust operators are increasingly adopted for edge-computing and resource-constrained environments to minimize memory footprint and avoid the garbage collection pauses of Go and JVM languages.

Reference Implementations

  • (2026) ==kubernetes/sample-controller== ⭐ 3486 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The canonical sample controller repository managed by the Kubernetes API machinery SIG. It serves as the official, direct architectural blueprint for creating custom controllers using client-go libraries. Live grounding verifies it is the foundational reference tool for understanding thread-safe informer caches and queue sync mechanisms.

Stateful Applications

  • (2021) developers.redhat.com: Managing stateful applications with Kubernetes Operators in Golang 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An enterprise guide mapping the management of stateful database engines inside Kubernetes using Go-based operators. Highlights local volume binding, replication coordination, and automatic failovers. Reconciled with 2026 patterns, this forms the underlying theory for stateful database-as-a-service (DBaaS) offerings on Kubernetes.

Tool Comparison

  • (2021) openshift.com: Build Your Kubernetes Operator With the Right Tool 🌟 [COMMUNITY-TOOL] — A comparative guide highlighting the tradeoffs between different operator developer tools like Helm, Ansible, and Go. It establishes a maturity model to help teams choose tools based on their application's lifecycle complexity. Essential reference for migration strategies from simple manifest templates to active state-reconciliation loops.

Data and Databases

Lifecycle Management

Schema Migrations

  • (2024) ==coderanger/migrations-operator: Migrations-Operator== ⭐ 136 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This controller coordinates database schema migration jobs relative to active deployment rollouts. By intercepting deployment events, it executes schema changes as blocking preparatory steps, ensuring application microservices only start up once target database structures align.

NoSQL Operators

ScyllaDB

  • (2026) ==scylladb/scylla-operator== ⭐ 399 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The ScyllaDB Operator streamlines deployment and maintenance tasks of high-performance Scylla clusters in-container. It takes care of complex cluster scaling, multi-zone node repair loops, automated backups, and version migrations to deliver bare-metal database performance inside container orchestrators.

Data Management

Storage

Backup

Operators (2)
  • (2023) ==gemini== ⭐ 434 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A declarative volume snapshot management controller that automates standard backup schedules. It utilizes the native Kubernetes VolumeSnapshot APIs to orchestrate retention policies and dynamic cross-region backup restorations.

Developer Experience

Inner Loop

Development Tools

Operators (3)
  • (2022) Kdo: deployless development on Kubernetes 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Bypasses standard development lifecycles by executing code directly inside Kubernetes environments. It connects local systems directly with cluster networks, eliminating slow container build-and-push cycles.

Extensibility and Development

API Extensions

Conceptual Overviews

  • (2024) blog.frankel.ch: Introduction to Kubernetes extensibility 🌟 [N/A CONTENT] [COMMUNITY-TOOL] — A structural overview explaining the mechanics of Kubernetes API extension. It reviews Custom Resource definitions, control loops, and API aggregation structures to build a complete mental map of the engine's modular architecture.

Controller Architecture

Conceptual Overviews (1)

  • (2026) Kubernetes.io: Operator pattern [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — The official documentation explaining the Kubernetes Operator pattern. It covers the fundamentals of custom resource definitions, state reconciliation, and using control loops to manage application lifecycles.
  • (2025) Operator Capability Levels [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — This reference defines the five operator maturity tiers. Discusses steps ranging from basic auto-install strategies (Level 1) up to intelligent, autonomous auto-tuning and security-auditing systems (Level 5) to help engineers measure operator capabilities.
  • (2024) dev.to/thenjdevopsguy: What Is A Kubernetes Operator? [N/A CONTENT] [COMMUNITY-TOOL] — A fundamental introduction analyzing the architecture and patterns behind Kubernetes Operators. Demystifies the reconciliation engine, custom resources, and control loops to teach how human runbooks can be systematically automated in software.

Guides and Best Practices

Controller Testing

Guides and Best Practices (1)

  • (2025) superorbital.io: Testing Production Kubernetes Controllers [N/A CONTENT] [COMMUNITY-TOOL] — A highly practical engineering article explaining testing techniques for Kubernetes operators. Discusses unit testing designs, envtest integration, mock clients, and local cluster sandbox validation routines needed to secure resilient operators.

Reliability Engineering

  • (2025) ==github.com/sieve-project/sieve== ⭐ 345 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Sieve is an advanced chaos testing engine created to validate custom controller stability. By injecting artificial API delays, dynamic component drops, and network splits, it forces edge-case paths to discover concurrency errors and reconciliation bugs.

Frameworks and Tooling

Controller SDKs

  • (2026) ==kubernetes-sigs/kubebuilder== ⭐ 9183 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kubebuilder is the industry-standard developer framework for generating custom Kubernetes APIs and controllers. Leveraging structured scaffolding, advanced code generators, and controller-runtime wrappers, it streamlines the creation of highly reliable operators.

Guides and Best Practices (2)

Guides and Best Practices (3)

Enterprise Patterns

Registries and Catalogs

Operator Discovery

  • (2026) operatorhub.io [N/A CONTENT] [COMMUNITY-TOOL] — OperatorHub is the central ecosystem registry showcasing community and enterprise Operators. It functions as an indexing catalog that standardizes installation formats, promoting packaging standards aligned with the Operator Lifecycle Manager (OLM) format.

FinOps and Autoscaling

Green Ops

Resource Schedulers

  • (2026) kube-green.dev [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — Kube-green is an innovative scheduling tool designed for environment optimization. It suspends unused development namespaces by scaling down deployments, statefulsets, and cronjobs to zero during non-working windows, yielding substantial energy and infrastructure cost reductions.

Multi-Cluster

Cost Tracking

  • (2025) ==github.com/2-alchemists/krossboard-kubernetes-operator== ⭐ 63 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Krossboard provides multi-cluster aggregation of system footprints and utilization. Aimed at enterprise FinOps implementations, it normalizes resource tracking metrics across cloud distributions to generate structured usage metrics and consolidated billing trends.

Resource Optimization

Autoscaling

  • (2024) github.com/ElementTech/kube-reqsizer ⭐ 207 [GO CONTENT] [COMMUNITY-TOOL] — An intelligent, micro-scale request resizer that monitors active CPU and Memory signatures. It automatically updates container resource request guidelines on-the-fly, reducing computing slack to boost global node density without violating application reliability constraints.

Infrastructure

Bare Metal

Provisioning

Operators (4)
  • (2024) ==Bare Metal Operator== ⭐ 745 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A Metal3 driver integration designed to inspect, provision, and maintain bare-metal servers using standard Kubernetes resources. It bridges Kubernetes management layers directly to physical infrastructure provisioning.

Cluster Management

Node Provisioning

Operators (5)
  • (2024) ==openshift/machine-api-operator== ⭐ 186 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A foundational OpenShift subsystem that manages machines as standard resources. It dynamically scales cloud infrastructure nodes up or down according to compute demands.

Node Upgrades

Operators (6)
  • (2024) ==rancher/system-upgrade-controller: System Upgrade Controller== ⭐ 952 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Orchestrates OS-level and Kubernetes runtime updates across node pools. It structures a sequential drain, upgrade, and uncordon pipeline to maintain continuous service availability.

Control Plane

etcd Coordination

Operators (7)
  • (2022) ==Quentin-M/etcd-cloud-operator== ⭐ 234 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An early framework designed to coordinate etcd state engines in dynamic environments. Modern production setups have moved towards official cloud-provider tooling or alternative operators.

Data Management (1)

Apache Flink

Operators (8)
  • (2024) ==spotify/flink-on-k8s-operator: Kubernetes Operator for Apache Flink== ⭐ 225 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Developed by Spotify, this operator simplifies Apache Flink execution. It manages stream-processing job lifecycles, dynamically allocates cluster resources, and automates state checkpointing.

Databases

Operators (9)
  • (2024) ==DB Operator 🌟== ⭐ 163 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The DB Operator facilitates external and in-cluster database administration. It manages PostgreSQL and MySQL configurations natively by separating deployment credentials from application logic, automating dynamic user and table creation using custom resources.

In-Memory Databases

Operators (10)
  • (2023) ==krestomatio/keydb-operator== ⭐ 59 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Manages KeyDB setups, providing high-speed, multi-threaded cache nodes with automated replica synchronization, cluster scaling, and rapid failover handling.

MongoDB

Operators (11)
  • (2023) ==OT-CONTAINER-KIT/mongodb-operator: MongoDB Operator== ⭐ 49 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Manages MongoDB databases, replica sets, and sharded environments. It automates scaling, credential updates, and physical storage volume mounts within the cluster.

Object Storage

Operators (12)
  • (2022) ==didil/autobucket-operator== ⭐ 12 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A developer-focused operator that dynamically constructs cloud-native storage buckets (e.g., AWS S3) via dynamic pod annotations, streamlining access to stateful storage assets.

PostgreSQL

Operators (13)
  • (2024) ==reactive-tech/kubegres== ⭐ 1351 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kubegres is a lightweight operator for managing PostgreSQL clusters. It coordinates master-replica setups, automated failovers, and physical backups using native StateSets with minimal footprint.

Streaming Data

Operators (14)
  • (2023) ==pravega/pravega-operator== ⭐ 40 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Deploys and maintains high-throughput Pravega streaming architectures, orchestrating the state of BookKeeper, ZooKeeper, and active cluster storage segments.

GitOps

Infrastructure-as-Code

Operators (15)
  • (2024) ==isaaguilar/terraform-operator: Terraform Operator== ⭐ 380 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Executes declarative Terraform pipelines natively as custom resources inside clusters. It matches dynamic GitOps deployment models to external cloud infrastructure, allowing teams to unify orchestration under a single control plane.

Infrastructure and Hardware

AIML Infrastructure

Hardware Integration

  • (2026) ==NVIDIA/k8s-device-plugin: NVIDIA device plugin for Kubernetes== ⭐ 3788 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This specialized DaemonSet exposes physical GPU properties to the local kubelet node manager. Operating as the essential link for hardware-accelerated workloads, it handles task-scheduling configurations and sets device-isolation runtimes so container systems can safely slice and access host GPU hardware.

Kubernetes GitOps and Packaging

Argo Project Ecosystem

UI Visualization

  • (2024) ==feat(ui): Add AppSet to Application Resource Tree in Argo CD== ⭐ 23128 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official Argo CD feature enhancement that maps ApplicationSets directly inside the dashboard UI tree. This view simplifies managing multi-tenant topologies and nested application definitions for platform operators.

Media

Streaming

Video Processing

Operators (16)

Networking

DNS

Service Discovery

Operators (17)
  • (2023) ==Meerkat== ⭐ 38 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A dynamic networking operator designed to update and map external DNS routes. It reads internal networking resource allocations to dynamically register up-to-date hostname directories.

DNS and Ingress

Routing Controllers

  • (2024) ==borchero/switchboard: Switchboard== ⭐ 163 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Switchboard functions as a Kubernetes-native dynamic router and DNS management hub. It coordinates with global DNS service APIs to orchestrate routing policies, mapping live cluster ingress nodes automatically to external domain registrations.

Ingress and Gateway

Controllers

  • (2021) InGate: Ingress & Gateway API Controller (Archived) ⭐ 728 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [LEGACY] — Architectural prototype designed to test Ingress integration patterns. Live engineering truth confirms this repository is archived by SIG-Network, as development has shifted entirely toward the standardized Gateway API.

Gateway API

  • (2023) Kubernetes Gateway API ⭐ 2885 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Official GitHub repository for the standard Kubernetes Gateway API. This next-generation specification supersedes standard Ingress, offering expressive, role-oriented, and extensible routing APIs (Gateway, GatewayClass, and Route resources).

Ingress and Routing

Host Port Allocation

Operators (18)
  • (2022) ==HostPort Operator== ⭐ 18 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An allocation controller that coordinates and locks dedicated hostPorts for pods. It mitigates physical scheduling conflicts when multiple high-performance workloads require direct edge node exposure.

Load Balancing

High Availability

Operators (19)
  • (2023) ==redhat-cop/keepalived-operator: Keepalived operator== ⭐ 123 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Manages Keepalived deployments within Kubernetes clusters. It coordinates VIP (Virtual IP) failover protocols across physical or virtual cluster node interfaces.

Operator

Expose Service

  • (2021) abhirockzz/kubexpose-operator [GO CONTENT] [EMERGING] [LEGACY] — An experimental Go-based operator designed to automatically create Ingress resources or load balancers for annotated services. Designed as a learning showcase for Kubebuilder workflows, this project is archived in 2026 but remains a valuable reference for custom ingress generation patterns.

Observability

Distributed Tracing

OpenTelemetry Operator

  • (2021) ==github.com/open-telemetry/opentelemetry-operator== ⭐ 1717 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kubernetes operator for automating the deployment and management of the OpenTelemetry Collector. Simplifies application instrumentation via automated inject mechanisms for Java, NodeJS, Python, and Dotnet, facilitating declarative telemetry pipeline management across clusters.

Logging

Pipeline Management

Operators (20)
  • (2023) ==Logging Operator== ⭐ 51 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Simplifies multi-tenant logging infrastructure by coordinating central Fluentd and Fluent Bit setups. It manages complex logging filters and output endpoints declaratively.

Metrics

Thanos Orchestration

Operators (21)
  • (2023) ==banzaicloud/thanos-operator 🌟== ⭐ 283 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Streamlines Thanos-based monitoring architectures by provisioning Query, Store, Compact, and Ruler resources. It manages historical metrics storage across dynamic environments.

TimeSeries Databases

Operators (22)
  • (2024) ==VictoriaMetrics/operator== ⭐ 566 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Coordinates components of VictoriaMetrics (including VMCluster and VMAgent). It manages complex metrics scraping rules and automates long-term TSDB storage scaling.

Monitoring

External Integration

Operators (23)
  • (2023) ==uptimerobot-operator== ⭐ 60 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Synchronizes current routing profiles with the UptimeRobot API. It dynamically configures exterior synthetic latency testing targets as new ingresses scale up or out.

Ingress Monitoring

Operators (24)
  • (2023) ==IngressMonitorController (Deprecated)== ⭐ 735 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [LEGACY] — An older monitoring operator designed to orchestrate uptime checks across multiple external platforms. Live Grounding indicates that this project has been archived and deprecated in favor of active native alternatives.

Operations and Reliability

Addons Management

Cluster Lifecycle

  • (2025) ==Cluster Addons 🌟== ⭐ 156 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This SIG-Cluster-Lifecycle project establishes standard, declarative approaches for managing core cluster addons. It provides structured templates for bootstrapping, upgrading, and removing cluster utilities like CoreDNS or CSI engines safely.

Cluster Cleanup

Resource Management

  • (2026) ==github.com/gianlucam76/k8s-cleaner 🌟== ⭐ 791 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A dynamic garbage-collection engine built to maintain clean, clutter-free cluster environments. By looking up orphaned, obsolete, or outdated configmaps, secrets, persistent volumes, and failed pods, it prunes cluster footprints against user-defined scheduling filters.

Data Protection and Backup

Observability (1)

  • (2024) ==vitobotta/velero-notifications== ⭐ 36 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A specialized alerting utility designed to track and publish execution metrics of Velero backups. It monitors backup Custom Resources within the cluster to push real-time success, failure, or warning logs straight to ChatOps integrations including Slack, Discord, and arbitrary HTTP webhooks.

Observability (2)

Synthetics and Audits

  • (2024) K8s KPIs with Kuberhealthy 🌟 [N/A CONTENT] [COMMUNITY-TOOL] — This reference details how to implement the Kuberhealthy operator to monitor cluster KPIs. It explains how to deploy synthetic check CRDs that run test cycles of network calls, pod scheduling, and DNS lookups, alerting operators to cluster problems early.

Resource Lifecycle

Ephemeral Clusters

  • (2025) ==github.com/NCCloud/mayfly: Ephemeral Kubernetes Resources 🌟== ⭐ 337 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Mayfly introduces time-to-live policies on generic Kubernetes resources and testing namespaces. Once designated duration guidelines are reached, Mayfly executes automated teardowns, ensuring transient tests do not leave lingering etcd records or unused services.

Orchestration

Kubernetes

Networking (1)

Observability (3)

  • (2024) kube-fluentd-operator 🌟 ⭐ 321 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [LEGACY] — A now-archived operator designed to dynamically construct namespace-specific Fluentd logging pipelines in Kubernetes. Modern platform engineering architectures have largely transitioned to standardized OpenTelemetry or Fluent Bit routing setups.

Operators (25)

  • (2025) Speculator: Redis Operator ⭐ 1379 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — An advanced Redis Operator developed by OT Container Kit. Features automated failover management, backup orchestrations, persistence configuration, and Redis Sentinel cluster sizing within Kubernetes native deployments.
  • (2025) Kotal operator ⭐ 221 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — A multi-client blockchain node operator for Kubernetes. Simplifies configuring and maintaining decentralized networks (such as Ethereum and IPFS) through native Kubernetes custom resources.
  • (2024) Cass Operator ⭐ 258 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟 [COMMUNITY-TOOL] — DataStax's Kubernetes operator designed to simplify Apache Cassandra cluster deployment and operations. Automates complex stateful management workflows including horizontal scaling, rolling upgrades, and cluster healing.
  • (2022) Sentry Operator ⭐ 27 [GO CONTENT] [ADVANCED LEVEL] 🌟 [COMMUNITY-TOOL] — An infrastructure automation controller developed to provision, update, and manage Sentry instances, projects, and DSN configuration parameters inside a unified Kubernetes environment.
  • (2021) thenewstack.io: When to Use, and When to Avoid, the Operator Pattern 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Evaluates operational trade-offs and complexity overheads associated with implementing the Operator Pattern. Identifies ideal use-cases (highly stateful, transactional databases) and scenarios where basic Helm or IaC scripts suffice.
  • (2020) kruschecompany.com: What is a Kubernetes Operator and Where it Can be Used? [COMMUNITY-TOOL] — Illustrated guide defining the role, architecture, and common deployment strategies of Kubernetes Operators. Explains how custom controllers automate day-2 infrastructure management tasks like scaling, backups, and state healing.
  • (2020) devops.com: Day 2 for the Operator Ecosystem 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Focuses on Kubernetes Operator lifecycle maturity models, introducing toolkits like KUDO (Kubernetes Universal Declarative Operator). Covers operational challenges, telemetry gathering, and unified configuration schemas.
  • (2019) infoq.com: Kubernetes Operators in Depth [ADVANCED LEVEL] [COMMUNITY-TOOL] — High-density architectural breakdown exploring the reconciliation loop, custom controller watch mechanisms, and cache behaviors inside the Kubernetes API server model. Essential reading for platform architects building operators.

Platform Engineering

GitOps and Configuration

Dynamic Configurations

  • (2024) ==glebiller/dynamic-configuration-operator: Dynamic Configuration Operator== ⭐ 34 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A custom controller facilitating zero-downtime, runtime application configurations. It tracks custom properties and systematically updates downstream ConfigMaps or dynamic configurations directly in pod filespaces without triggering heavy, traffic-disruptive pod recycling loops.

Manifest Mutation

  • (2025) ==prosimcorp/reforma== ⭐ 58 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [EMERGING] — Reforma is an emerging schema validation and dynamic mutation engine for Kubernetes manifests. Operating ahead of deployment pipelines, it allows engineers to declarative-define mutating policies and structural validations on raw YAML. This functions as a lightweight, modular alternative to complex mutating admission webhooks.

Infrastructure Automation

Scanning

  • (2020) Domain-harvester [GO CONTENT] [COMMUNITY-TOOL] — Technical codebase utility built to scan, harvest, and aggregate domain information. Useful for tracking internal infrastructure endpoints and public-facing assets during operational inventory audits.

Multi-Tenancy

Conceptual Overviews (2)

Registries and Catalogs (1)

  • (2024) Discover K8Spin open source software [N/A CONTENT] [COMMUNITY-TOOL] — The main portal cataloging K8Spin's open-source projects. Focuses on lightweight cluster sharing tools, providing APIs designed to bootstrap secure developer workspaces instantly.

Resource Isolation

  • (2024) ==K8Spin Operator 🌟== ⭐ 217 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An early multi-tenant operator created to carve out isolated tenant partitions quickly. While development has slowed in favor of modern virtual-cluster controllers, its early designs show useful approaches for tenant namespace boundaries.

Reliability

Monitoring (1)

Synthetic Monitoring

Operators (26)
  • (2024) ==kuberhealthy 🌟== ⭐ 2247 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Kuberhealthy schedules dynamic, real-world actions as background test suites. It detects underlying API, network, or storage decay that static monitoring tools overlook by continually validating that clusters are functionally operational.

Testing

Load Testing

Operators (27)
  • (2022) kubeload - load testing ⭐ 24 [GO CONTENT] [COMMUNITY-TOOL] — An operator framework that manages and scales load testing deployments inside a cluster. It coordinates distributed engines to simulate realistic traffic profiles against selected cluster endpoints, streamlining continuous integration workflows.

Performance Benchmarking

Operators (28)

Resources

Case Study

Migration

Operators (29)

Education

Architectural Decision

Operators (30)

Architectural Pattern

Operators (31)

Concepts

Operators (32)
  • (2021) container-solutions.com: Kubernetes Operators Explained [N/A CONTENT] [COMMUNITY-TOOL] — An foundational architectural guide explaining the design of the Kubernetes Operator pattern. It covers the core mechanics of custom controllers, the reconciliation loop, and CRDs, codifying operational knowledge into software.

Deep Dive

Operators (33)
  • (2021) iximiuz.com: Exploring Kubernetes Operator Pattern 🌟 [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A deep-dive analysis on the mechanics of the controller runtime. It explains internal structures such as informers, dynamic work queues, and client-go caches, illustrating how reconciliation loops run concurrently.

Hands-on Development

Operators (34)

Introductory

Operators (35)

Java Ecosystem

Operators (36)
  • (2021) spring.io: Get to Know a Kubernetes Operator! [N/A CONTENT] [COMMUNITY-TOOL] — A guide demonstrating the Java Operator SDK. It details how Java-centric teams can write native controllers using GraalVM to compile down to low-memory native executables.

Official Guide

Operators (37)
  • (2021) kubernetes.io: Writing a Controller for Pod Labels [N/A CONTENT] [COMMUNITY-TOOL] — An introductory blog post from the Kubernetes maintainers details the process of writing an active controller that automatically validates and formats Pod label schemas.

Trade-off Evaluation

Operators (38)

Tutorial Series

Operators (39)

Value Proposition

Operators (40)

Security

Access Control

Dynamic RBAC

Operators (41)
  • (2023) ==redhat-cop/dynamic-rbac-operator: Dynamic RBAC Operator== ⭐ 23 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Dynamically coordinates RBAC permissions based on directory groups or namespace annotations, simplifying user onboarding and access control administration.

RBAC

Operators (42)
  • (2024) ==FairwindsOps/rbac-manager: RBAC Manager 🌟== ⭐ 1654 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — RBAC Manager mitigates the configuration overhead of managing Kubernetes users and permissions. It provides structured Custom Resources that simplify standard RoleBindings and ClusterRoleBindings under a clean API.

Enterprise Architecture

Air-Gapped Environments

Operators (43)
  • (2021) openshift.com: Is your Operator Air-Gap Friendly? [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explains critical design rules for deploying operators inside highly secure, disconnected, or air-gapped systems, detailing offline container registries, local metadata hosting, and strict network configurations.

Multi-tenancy

Platform Engineering (1)

Operators (44)
  • (2024) ==Capsule Operator== ⭐ 2095 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Capsule aggregates namespaces into virtual 'tenants', providing secure multi-tenancy. It enforces dynamic network isolation, storage limits, and ingress classes, forming a foundation for platform engineering.

Secrets Management

AWS Integration

Operators (45)

Multi-Provider Secrets

Operators (46)
  • (2024) ==digitalis-io/vals-operator== ⭐ 167 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Utilizes the vals framework to dynamically parse and inject secrets from Vault, AWS SSM, and GCP Secret Manager. It prevents local credential storage risks and eliminates third-party platform lock-in.

Registry Authentication

Operators (47)
  • (2023) ==registry-creds== ⭐ 350 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Automatically syncs image pull credentials across diverse namespaces from registry platforms like ECR, GCR, and Docker Hub. It solves multi-tenant credential sharing securely without requiring manual duplications.

Simplification

Operators (48)
  • (2022) Michaelpalacce/SimpleSecrets ⭐ 25 [GO CONTENT] [EMERGING] — An experimental secrets management utility that simplifies distributing and syncing environment configurations securely across multiple namespaces.

Vulnerability Management

Scanning (1)

Operators (49)
  • (2023) ==ckotzbauer/vulnerability-operator== ⭐ 87 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Integrates scanning engines with active cluster runtimes, cross-referencing running container image tags against security databases to alert administrators to new vulnerabilities.

Security and Compliance

Secret Management

Conceptual Overviews (3)

  • (2024) thenewstack.io: HashiCorp Vault Operator Manages Kubernetes Secrets [N/A CONTENT] [COMMUNITY-TOOL] — An analytical study examining security profiles using the Vault Secrets Operator. It dissects architectural topologies where dynamic secrets are mirrored from external secret hubs to native pods, validating zero-trust posture across cloud infrastructures.

Dynamic Secrets

  • (2025) ==github.com/mittwald/kubernetes-secret-generator 🌟== ⭐ 391 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This secret generator creates secure random passwords, certificates, and private SSH keys on-demand in-cluster. Generated data is stored directly as encrypted Secrets resources, eliminating the risk of checking cleartext credentials into infrastructure repositories.

HashiCorp Vault

  • (2025) ==github.com/ricoberger/vault-secrets-operator== ⭐ 687 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This operator provides direct synchronization between HashiCorp Vault secrets and Kubernetes Secrets storage classes. By tracking external Vault paths, it triggers dynamic, secure updates to dependent application pods the moment source secrets are rotated.

Security and Identity

Secrets Management (1)

External Secrets Sync

  • (2021) contentful-labs/kube-secret-syncer 🌟 ⭐ 194 [GO CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A targeted operator designed to synchronize secrets securely from external services (specifically AWS Parameter Store) directly into native Kubernetes Secrets, ensuring cloud-hosted secrets stay continuously aligned with active workloads.

Storage (1)

Volume Management

Autoscaling (1)

  • (2025) ==github.com/DevOps-Nirvana: Kubernetes Volume / Disk Autoscaler (via Prometheus)== ⭐ 317 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This automation controller watches real-time disk capacities across cluster storage layers via Prometheus queries. When custom consumption thresholds are breached, it triggers dynamic CSI volume expansion, preempting critical disk-exhaustion outages for active database containers.

Workload Management

Job Scheduling

Cron Engines

  • (2025) ==github.com/furiko-io/furiko== ⭐ 502 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Furiko is an advanced execution platform designed to host ad-hoc and cron jobs in complex production clusters. It expands upon native CronJob limitations by offering comprehensive concurrency controls, deep execution history archives, and parameterized triggers suited for high-throughput batch environments.

Operators (50)

  • (2024) ==github.com/ContainerSolutions/delayed-jobs-operator== ⭐ 10 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A minor controller designed to rate-limit or defer the spin-up of batch execution workloads. It introduces explicit queues or temporal delays before initiating pods, safeguarding backend databases from heavy, simultaneous connection storms.
  • (2024) github.com/lukaszraczylo/jobs-manager-operator 🌟 [GO CONTENT] [COMMUNITY-TOOL] — A specialized job execution supervisor focused on automated lifecycle pruning. It dynamically clears completed or broken jobs based on custom-defined TTL guidelines, preventing etcd congestion caused by historical batch resources.

💡 Explore Related: Kubernetes Storage | Kubernetes Alternatives | Kubernetes Client Libraries

Reference in New Issue View Git Blame Copy Permalink