ACK architecture

ACK architecture An architecture diagram generated by Archify. Kubernetes user / operator · kubectl apply · Architecture component Kubernetes user / operator kubectl apply Custom resources · Kubernetes spec / status · Kubernetes cluster Custom resources Kubernetes spec / status Custom resource definitions · Kubernetes API schema · Kubernetes cluster Custom resource definitions Kubernetes API schema ACK service controller · Service-specific reconciliation · Kubernetes cluster ACK service controller Service-specific reconciliation AWS API · Controller IAM permissions · AWS services AWS API Controller IAM permissions AWS resources · S3, RDS, DynamoDB and more · AWS services AWS resources S3, RDS, DynamoDB and more apply YAML CR change event API schema create / update / delete manage AWS response update status Kubernetes cluster AWS services Legend Kubernetes component AWS service User

Reconciliation

  • • CRDs define the Kubernetes input schema.
  • • Controllers watch CRs and call AWS service APIs.
  • • Observed AWS state updates CR status.

Permissions and readiness

  • • Kubernetes RBAC and controller IAM permissions are separate.
  • • CR creation / ResourceSynced does not prove app readiness.
  • • Default watch scope is cluster; namespace separation alone is not isolation.