mirror of https://github.com/netbirdio/kubernetes-operator.git synced 2026-05-22 17:11:40 -07:00

T

Philip LaineandGitHub 0ffcaca94b Make network router read only file system by default (#213 )

This changes the router and sidecar to run with read only file system by
default. This is good practice in Kubernetes and often required in most
clusters.

Fixes #144
Fixes #114

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Enhanced DNS configuration handling in containerized deployments with
stricter filesystem access controls and improved security measures.

<!-- review_stack_entry_start -->

[![Review Change
Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/netbirdio/kubernetes-operator/pull/213?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)

<!-- review_stack_entry_end -->

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Signed-off-by: Philip Laine <philip.laine@gmail.com>

2026-05-18 11:21:35 +02:00

.github

Add issue template (#251 )

2026-05-13 12:47:14 +02:00

api

Fix SPDX license header (#231 )

2026-05-05 12:59:36 +02:00

charts/netbird-operator

Add missing pdb rbac permissions (#235 )

2026-05-06 14:01:55 +02:00

cmd

Verify management url correct format (#254 )

2026-05-14 15:27:42 +02:00

config/crd

Fix missing Kustomization for CRDs (#253 )

2026-05-13 15:36:27 +02:00

docs

Move docs to NetBird documentation website. (#247 )

2026-05-13 12:43:27 +02:00

examples

Rename Helm chart and Docker image and move to GHCR (#233 )

2026-05-06 12:26:32 +02:00

hack

Fix SPDX license header (#231 )

2026-05-05 12:59:36 +02:00

internal

Make network router read only file system by default (#213 )

2026-05-18 11:21:35 +02:00

pkg/applyconfigurations

Fix SPDX license header (#231 )

2026-05-05 12:59:36 +02:00

test/e2e

Rename Helm chart and Docker image and move to GHCR (#233 )

2026-05-06 12:26:32 +02:00

.dockerignore

Refactor Dockerfile to build Go binary outside of Docker (#218 )

2026-05-04 14:44:10 +02:00

.gitignore

Add initial version with help and admission controller (#1 )

2025-01-29 22:44:09 +01:00

.golangci.yml

Add build version to NetBird client user agent. (#248 )

2026-05-13 12:43:46 +02:00

CONTRIBUTOR_LICENSE_AGREEMENT.md

Add CLA (#15 )

2025-03-19 15:12:18 +01:00

Dockerfile

Rename Helm chart and Docker image and move to GHCR (#233 )

2026-05-06 12:26:32 +02:00

go.mod

Bump github.com/netbirdio/netbird from 0.70.4 to 0.71.2 (#260 )

2026-05-18 11:02:55 +02:00

go.sum

Bump github.com/netbirdio/netbird from 0.70.4 to 0.71.2 (#260 )

2026-05-18 11:02:55 +02:00

LICENSE

Initial commit

2025-01-24 13:01:03 +01:00

Makefile

Fix incorrect arch build for ARM64 in multiarch images (#252 )

2026-05-13 14:02:51 +02:00

PROJECT

Add sidecar profile (#192 )

2026-04-23 19:17:53 +02:00

README.md

Move docs to NetBird documentation website. (#247 )

2026-05-13 12:43:27 +02:00

README.md

NetBird Kubernetes Operator

The NetBird Kubernetes Operator automates the provisioning of NetBird network access for services running in your cluster. It extends the Kubernetes API with CRDs, letting you manage NetBird peers, routes, and groups declaratively, the same way you manage the rest of your infrastructure.

Features

Declarative peer management - define NetBird peers as Kubernetes resources and let the operator handle provisioning and lifecycle
Automatic secret management - setup keys and credentials are stored and rotated as Kubernetes secrets
Namespace-scoped or cluster-wide - deploy per-namespace for multi-tenant clusters or cluster-wide for full coverage
Works with any NetBird deployment - compatible with NetBird Cloud and self-hosted instances

Getting Started

For full setup instructions, see the Getting Started documentation.

Once your secret is configured, install the operator with Helm.

helm upgrade --install --create-namespace -n netbird netbird-operator oci://ghcr.io/netbirdio/helm-charts/netbird-operator

API

Kind	API Version
Group	`netbird.io/v1alpha1`
NetworkResource	`netbird.io/v1alpha1`
NetworkRouter	`netbird.io/v1alpha1`
SetupKey	`netbird.io/v1alpha1`
SidecarProfile	`netbird.io/v1alpha1`