Operators Overview¶

b'nerd ships a suite of Kubernetes operators that let you manage platform resources and run managed workloads declaratively via CRDs — without leaving your cluster.

Available operators¶

S3 Operator (bnerd-s3-operator)¶

Kubernetes-native lifecycle management for RGW object storage. Declare S3User and S3Bucket custom resources in your cluster and the operator provisions them via the b'nerd control plane.

Full documentation: Object Storage — S3 Operator.

Nextcloud Operator¶

Deploy and manage Nextcloud instances as first-class Kubernetes workloads. The operator handles installation, upgrades, configuration management, and backup integration.

Backup Operator¶

Scheduled, policy-driven backups for OpenStack volumes and object storage. Define BackupPolicy resources specifying schedule (cron), retention, and targets; the operator handles execution and pruning.

Loki Operator¶

Deploys and configures a Grafana Loki log aggregation stack in your cluster. Manages Loki configuration, storage backends (object storage via the S3 operator), and lifecycle upgrades.

VPN Gateway Operator¶

WireGuard-based site-to-site and client VPN gateway, managed via CRDs. Declare VPNGateway resources to establish encrypted tunnels between your cluster workloads and on-premises or remote networks.

Installation¶

Operators are installed via Helm charts maintained by b'nerd. Contact your account manager or consult the operator-specific README for installation instructions and CRD reference.

Contract note¶

The S3 operator uses the same RGW control-plane API as the rest of the platform. Quota and lock state are admin-only operations — operator-provisioned users are subject to the same quota & limits rules as manually created users.