Platform）可以使用 Operator SDK CLI 根据 Go、Ansible、Java 或 Helm 开发自己的 Operator。Kubebuilder 作为基于 Go 的 Operator 的 构建解决方案嵌入到 Operator SDK 中，这意味着现有的 Kubebuilder 项目可以象 Operator SDK 一样使 用并继续工作。 注意 注意 OpenShift Container Platform Platform）可以使用 Operator SDK CLI 根据 Go、Ansible、Java 或 Helm 开发自己的 Operator。Kubebuilder 作为基于 Go 的 Operator 的 构建解决方案嵌入到 Operator SDK 中，这意味着现有的 Kubebuilder 项目可以象 Operator SDK 一样使 用并继续工作。 注意 注意 OpenShift Container Platform $GOPATH/src/ 项目时 需要 --repo 标志，因为生成的文件需要有效的模块路径。 5.3.2.2.1. PROJECT 文件 文件 operator-sdk init 命令生成的文件中是一个 Kubebuilder PROJECT 文件。从项目 root 运行的后续 operator-sdk 命令以及 help 输出会读取该文件，并注意到项目的类型为 Go。例如： $ mkdir -p $HOME

https://www.cncf.io/blog/2022/06/15/kubernetes-operators-what-are-they-some-examples/Framework - Kubebuilder/Operator-sdkCapability Model https://operatorframework.io/operator-capabilities/Validation & DefaultingOpenAPI … ● Quantors for subschemas ○ allOf ○ oneOf ○ anyOf ○ notOpenAPI v3 schemas https://book.kubebuilder.io/reference/generating-crdValidation rules - Common Expression Language (CEL) ● Stable since (deployment, certs, build process) ● Validation webhooks is executed just after mutating webhook ● [Kubebuilder] As for now it’s not possible to write mutating and validating admission webhooks for non custom

Status is the status of the Cilium policy rule // // +deepequal-gen=false // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus `json:"status"` } Metadata Describes `UpdateStatus` method because the // field does not exist in the structure. // // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus } Endpoint CRD When managing pods

Status is the status of the Cilium policy rule // // +deepequal-gen=false // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus `json:"status"` } Metadata Describes `UpdateStatus` method because the // field does not exist in the structure. // // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus } Endpoint CRD When managing pods

Status is the status of the Cilium policy rule // // +deepequal-gen=false // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus `json:"status"` } Metadata Describes `UpdateStatus` method because the // field does not exist in the structure. // // +kubebuilder:validation:Optional Status CiliumNetworkPolicyStatus } Endpoint CRD When managing pods