user2062360
user2062360

Reputation: 1523

Should we always deploy kube-operators in the kube-system namespace?

Let's say I want to install an operator like kubedb or redis-operator and I want to deploy respective Databases / CRDs in different namespaces such as dev, int , prod etc. Do these operators need to be in kube-system or they can be in some independent namespace such as kubedb or redis-ope.. ?

What is the best practice ? what are pros and cons ?

Upvotes: 1

Views: 584

Answers (1)

Arghya Sadhu
Arghya Sadhu

Reputation: 44559

The operators don't need to be in any specific namespace. The way it works is the service accounts that is used by the operators to interact with Kubernetes API need to have right RABC via role or clusterrole.

Best practice is to install operators in separate namespace of their own. This reduces the possibility of interfering with other components such a critical pods of kube-system namespace when you want to uninstall or upgrade the operators.

Upvotes: 2

Related Questions