Apiserver Builder: Extending Kubernetes via Aggregated Apiserver
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2021 · on Thursday, 2021-12-09· at 11:20· Kubecon + CloudNativeCon 演讲厅, 虚拟会议 (Virtual)·
summary
Compares CRD vs aggregated API and shows concrete tooling: apiserver-builder CLI for one-shot scaffolding and the new apiserver-runtime library for reusable SDK-style servers. Demonstrates a fluent one-line builder that registers resources, supports proxy subresource and connector interfaces, and can replace etcd storage (e.g., MySQL or files). Covers mutual TLS setup, TokenReview/SubjectAccessReview delegation for authz/authn, APF queuing behavior, and when AA wins (multi-version control, custom admission/conversion, offloading etcd load).
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:10About
- 2:00Outlines
- 3:04Aggregated Apiserver
- 3:51Apiserver Aggregation (AA)
- 7:15AA's Authentication - MTLS
- 9:25AA's Authentication pt1
- 13:39AA's Authorization
- 14:50AA's Admission Control
- 16:07The Whole Spill
- 18:21VS CustomResourceDefinition
- 20:20General Suggestion
- 22:36ApiserverBuilder, KubeBuilder
- 24:53Controller-Runtime
- 28:26Scope
- 30:20Sample-Apiserver (Snippet)
- 31:05Apiserver-Runtime (Snippet)
- 33:05Apiserver-Runtime Non-ETCD
- 33:49Cluster-Gateway (Snippet)
related talks
28mAdvanced API Machinery Topics: Aggregated API Servers and OpenAPI v3
40mExtension API Server in Kubernetes: When CRD Is Not Enough
05mEffectively Extending Kubernetes Resources
30mAPI Evolution With CRDs: Best Practices For Authoring & Fuzz Testing APIs
34mExtending the Kubernetes API: What the Docs Don't Tell You
35mBuilding and Enabling APIs with Crossplane 1
38mDeep Dive: API Machinery SIG
32mKubebuilder: SDK for Extending Kubernetes