Kubernetes Native: Introducing Spinnaker Operator

Spinnaker Operator is now Beta!

With Spinnaker Operator, define all the configurations of Spinnaker in native Kubernetes manifest files, as part of the Kubernetes kind “SpinnakerService” defined in its own Custom Resource Definition (CRD). With this approach, you can customize, save, deploy and generally manage Spinnaker configurations in a standard Kubernetes workflow for managing manifests. No need to learn a new CLI like Halyard, or worry about how to run that service.

The Spinnaker Operator has two flavors to choose from, depending on which Spinnaker you want to use: Open Source or Armory Spinnaker.

With the Spinnaker Operator, you can:

• Use “kubectl” to install and configure a brand new Spinnaker (Open Source or Armory Spinnaker).
• Take over an existing Spinnaker installation deployed by Halyard and continue managing it with the operator going forward.
• Use Kustomize or Helm Charts to manage different Spinnaker installations with slight variations.
• Use Spinnaker profile files for providing service-specific configuration overrides (the equivalent of clouddriver-local.yml, gate-local.yml, etc.)
• Use Spinnaker service settings files to tweak the way Deployment manifests for Spinnaker microservices are generated.
• Use any raw files needed by configs in the SpinnakerService manifest (i.e. packer templates, support config files, etc.)
• Safely store secret-free manifests under source control, since a SpinnakerService manifest can contain references to secrets stored in S3, GCS or Vault (Vault is Armory Spinnaker only).

Additionally, Spinnaker Operator has some exclusive new features not available with other deployment methods like Halyard:

• Spinnaker secrets can be read from Kubernetes secrets.
• Spinnaker is automatically exposed with Kubernetes service load balancers (optional).
• Experimental: Accounts can be provisioned and validated individually by using a different SpinnakerAccount manifest, so that adding new accounts involves creating a new manifest instead of having everything in a single manifest.

Let’s look at an example workflow.

Assuming you have stored SpinnakerService manifests under source control, you have a pipeline in Spinnaker to apply these manifests automatically on source control pushes (Spinnaker deploying Spinnaker) and you want to add a new Kubernetes account:

1. Save the kubeconfig file of the new account in a Kubernetes secret, in the same namespace where Spinnaker is installed.
2. Checkout Spinnaker config repository from source control.
3. Add a new Kubernetes account to the SpinnakerService manifest file, referencing the kubeconfig in the secret:

   apiVersion: spinnaker.armory.io/v1alpha2
   kind: SpinnakerService
   metadata:
     name: spinnaker
   spec:
     spinnakerConfig:
       config:
         version: 2.17.1   # the version of Spinnaker to be deployed
         persistentStorage:
           persistentStoreType: s3
           s3:
             bucket: acme-spinnaker
             rootFolder: front50
   +      providers:
   +        kubernetes:
   +          enabled: true
   +          accounts:
   +          - name: kube-staging
   +            requiredGroupMembership: []
   +            providerVersion: V2
   +            permissions: {}
   +            dockerRegistries: []
   +            configureImagePullSecrets: true
   +            cacheThreads: 1
   +            namespaces: []
   +            omitNamespaces: []
   +            kinds: []
   +            omitKinds: []
   +            customResources: []
   +            cachingPolicies: []
   +            oAuthScopes: []
   +            onlySpinnakerManaged: false
   +            kubeconfigFile: encryptedFile:k8s!n:spinnaker-secrets!k:kube-staging-kubeconfig # secret name: spinnaker-secrets, secret key: kube-staging-kubeconfig
   +          primaryAccount: kube-staging
   

4. Commit the changes and open a Pull Request for review.
5. Pull Request approved and merged.
6. Automatically a Spinnaker pipeline runs and applies the updated manifest.

We hope that the Spinnaker Operator will make installing, configuring and managing Spinnaker easier and more powerful. We’re enhancing Spinnaker iteratively, and welcome your feedback.

Get Spinnaker Operator (documentation)

Get Armory Spinnaker Operator (documentation)

Interested in learning more about the Spinnaker Operator? Reach out to us here or on Spinnaker Slack – we’d love to chat!