Operators Overview¶
b'nerd ships a suite of Kubernetes operators that let you manage platform resources and run managed workloads declaratively via CRDs — without leaving your cluster.
Available managed services¶
| Service | Status |
|---|---|
| Object Storage provisioning (S3 Operator) | Stable |
| Managed Nextcloud | Stable |
| Volume backups (Backup Operator) | Stable |
| Log aggregation (Loki stack) | Stable |
| WireGuard VPN Gateway | Stable |
All operator-managed services are stable as of v1. Contact your account manager for Helm chart access and CRD reference documentation for any operator.
Managed services¶
Object Storage provisioning (S3 Operator)¶
Kubernetes-native provisioning for RGW object storage. Declare S3User and S3Bucket custom resources in your cluster and the operator provisions them via the b'nerd control plane — no manual API calls required.
Full documentation: Object Storage — S3 Operator.
Managed Nextcloud¶
Run Nextcloud as a first-class Kubernetes workload. The operator handles installation, upgrades, configuration management (including OIDC provider bootstrap), and backup integration.
Contact your account manager for the Helm chart location and CRD reference.
Volume Backups (Backup Operator)¶
Scheduled, policy-driven backups for OpenStack volumes and object storage. Define BackupPolicy resources specifying schedule (cron), retention policy, and targets; the operator handles execution and pruning.
Contact your account manager for the Helm chart location and CRD reference.
Log Aggregation (Loki Stack)¶
Deploys and manages a Grafana Loki log aggregation stack in your cluster. Manages Loki configuration, storage backends (via the S3 operator), and lifecycle upgrades.
Contact your account manager for the Helm chart location and CRD reference.
WireGuard VPN Gateway¶
Site-to-site and client VPN gateway managed via CRDs. Declare VPNGateway resources to establish encrypted WireGuard tunnels between your cluster workloads and on-premises or remote networks.
Contact your account manager for the Helm chart location and CRD reference.
Installation¶
Operators are installed via Helm charts maintained by b'nerd. Contact your account manager or see the operator-specific documentation for the Helm repository URL, CRD reference, and configuration options.
Contract note¶
The S3 operator uses the same RGW control-plane API as the rest of the platform. Quota and lock state are admin-only operations — operator-provisioned users are subject to the same quota & limits rules as manually created users.