Apiserver Builder: Extending Kubernetes via Aggregated Apiserver

Explore the practical approach to extending Kubernetes through Aggregated Apiserver in this 36-minute conference talk by Min Kim from Ant Group. Learn about the two pluggable methods for extending custom Kubernetes APIs: Custom Resource Definition (CRD) and Apiserver Aggregation (AA). Discover why AA can be a powerful alternative to CRD when seeking SDK-framework-level extensibility. Gain insights into building your own aggregated apiserver using the apiserver-builder command-line tool. Delve into topics such as AA's authentication, authorization, and admission control. Compare AA with CustomResourceDefinition and understand general suggestions for implementation. Examine code snippets from sample-apiserver, apiserver-runtime, and cluster-gateway projects. Enhance your knowledge of Kubernetes API extension techniques and their practical applications in cloud-native environments.

Intro
About
Outlines
Aggregated Apiserver
Apiserver Aggregation (AA)
AA's Authentication - MTLS
AA's Authentication pt1
AA's Authorization
AA's Admission Control
The Whole Spill
VS CustomResourceDefinition
General Suggestion
ApiserverBuilder, KubeBuilder
Controller-Runtime
Scope
Sample-Apiserver (Snippet)
Apiserver-Runtime (Snippet)
Apiserver-Runtime Non-ETCD
Cluster-Gateway (Snippet)