knative-operator

knative-operator

Chainguard's redistribution of the Knative Operator Helm chart, pre-configured with hardened Chainguard Images.

The Knative Operator installs, configures, and manages Knative Serving and Knative Eventing on a Kubernetes cluster via the KnativeServing and KnativeEventing custom resources.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret in the namespace the operator will run in:

kubectl create namespace knative-operator
kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace knative-operator

The upstream chart does not template imagePullSecrets onto the operator or webhook pods, so attach the pull secret to the ServiceAccounts the chart creates:

kubectl patch serviceaccount knative-operator \
  --namespace knative-operator \
  -p '{"imagePullSecrets":[{"name":"cgr-pull-secret"}]}'

kubectl patch serviceaccount operator-webhook \
  --namespace knative-operator \
  -p '{"imagePullSecrets":[{"name":"cgr-pull-secret"}]}'

Installation

helm install knative-operator oci://cgr.dev/ORGANIZATION/charts/knative-operator \
  --namespace knative-operator \
  --create-namespace

About This Chart

This is a redistribution of the upstream Knative Operator Helm chart. All upstream configuration options and documentation apply.

Once the operator and its webhook are running, create KnativeServing and/or KnativeEventing custom resources to have the operator install and manage those components.

For full documentation, see: https://knative.dev/docs/install/operator/knative-with-operators/