Crossplane control plane

Crossplane control plane An architecture diagram generated by Archify. Crossplane core · Controller · Kubernetes Cluster › crossplane-system Namespace Crossplane core Controller Package manager · Providers and Functions · Kubernetes Cluster › crossplane-system Namespace Package manager Providers and Functions Kubernetes API server · Resource API · Kubernetes Cluster Kubernetes API server Resource API etcd · Kubernetes state · Kubernetes Cluster etcd Kubernetes state Developer · Namespaced XR request · Architecture component Developer Namespaced XR request Composite Resource · v2 namespaced XR · Kubernetes Cluster › Namespace scope Composite Resource v2 namespaced XR Composition · Function pipeline · Kubernetes Cluster › Cluster scope Composition Function pipeline Managed resources · v2 namespaced MRs · Kubernetes Cluster › Namespace scope Managed resources v2 namespaced MRs AWS provider controller · Observe and reconcile MRs · Kubernetes Cluster › Provider integration AWS provider controller Observe and reconcile MRs Provider CRDs · Selected service APIs · Kubernetes Cluster › Provider integration Provider CRDs Selected service APIs AWS API · Cloud resources · Architecture component AWS API Cloud resources install apply XR pipeline desired MRs reconcile AWS API Kubernetes Cluster crossplane-system Namespace Namespace scope Cluster scope Namespace scope Provider integration Legend Backend Database Cloud External

v2 scope

  • • XRD v2 defaults to Namespaced
  • • Example MRs use *.aws.m.upbound.io/v1beta1
  • • LegacyCluster retains the older Claim path

Reconciliation and permissions

  • • Functions calculate desired resources
  • • Provider controllers call cloud APIs
  • • Namespace and ProviderConfig are not complete IAM isolation