All Operator Documentation

Kong Operator is the Kubernetes-native way to interact with Kong. Deploy Data Planes, configure Konnect, and more.

Install Kong Gateway Operator using Helm

Check if your version of Kong Gateway Operator is supported

New features, bug fixes and breaking changes for Kong Gateway Operator

Learn about the various settings and configurations of the operator which can be tweaked using CLI flags.

Explore schemas of the available Custom Resources for Kong Operator

Understand which versions of Kubernetes and the Gateway API Kong Operator works with

Configure feature gates and controllers for Kong ControlPlane in Kong Operator

Learn how to limit the namespaces that ControlPlane watches.

Deploy Kong Gateway data planes using Kong Gateway Operator

Use Kubernetes resources like `Gateway` to configure Kong Ingress Controller and Kong Gateway

Understand how Kong Operator interacts with Gateway API resources

Customize your Kong Gateway deployments when using the Gateway resource

Learn how Kong Operator reconciles `Gateway` resources, automatically configuring listeners as needed

Provide your Kong Gateway license using the KongLicense CRD or as an environment variable

Customize the image used for Kong Gateway

Deploy sidecar containers alongside Kong Gateway using PodTemplateSpec

Use a custom CA certificate when generating Data Plane certificates for Konnect

Package and deploy custom Kong plugins as OCI images using the Kong Gateway Operator and reference them in Kong Gateway resources.

See which metrics Kong Operator exposes and learn how to authenticate using a ServiceAccount to scrape the values

Control the number of available pods during a rollout

Customize your ControlPlane and DataPlane deployments. Supports images, volume mounts, node affinity and more

Horizontally scale Kong Gateway based on CPU usage

Scale your Kubernetes workloads using latency information from Kong Gateway

Complete migration guide from Kong Operator (KGO) 1.6.x to Kong Operator (KO) 2.0.0.

Learn how to migrate your KonnectExtension resources to KonnectGatewayControlPlane before upgrading to KO 2.0.0.

How do I migrate from Kong Gateway Operator 1.4 to 1.5, taking in to account breaking changes?

Deploy a new version of Kong Gateway Operator using Helm

Automatically terminate existing pods as new ones become ready

Create a new Kong Gateway Service any time your deployment changes, then promote it to be live after testing

Complete migration guide from Kong Ingress Controller (KIC) to Kong Operator (KO) 2.0.0.

Inspect resource statuses to see detailed information about Kong Gateway Operator resources

Automatically register DataPlanes with Konnect by providing authentication credentials in KonnectExtension

Explore schemas of the available Custom Resources for Kong Operator

Add rate limiting policies to a service or route using the `KongPlugin` CRD.

Define a Konnect Gateway Control Plane and bind it to your cluster using a `KonnectExtension`.

Provision a service and route in Konnect using Kubernetes CRDs.

Set up authentication between your Kubernetes cluster and Konnect using the `KonnectAPIAuthConfiguration` and `KonnectExtension` resources.

Use the `KongPlugin` CRD to configure proxy caching for a route or service.

Install the Kong Operator with Helm and enable Konnect CRD support.

Secure an API using the `key-auth` plugin and credentials from a `KongConsumer`.

How does the Kong Operator reconciliation loop work?

How do I add additional metadata to entities managed by Kong Operator?

What is KongPluginBinding, and how does it interact with the konghq.com/plugins annotation?

Create a Hybrid mode Control Plane in Konnect

Create a Control Plane, and a Control Plane Group that contains the Control Plane

Create a new Kong Ingress Controller Control Plane in Konnect

Reference an existing Hybrid mode Control Plane in Konnect

Provision TLS and CA certificates in Konnect using Kubernetes CRDs, and assign SNIs to TLS certificates.

Provision Consumers and manage Consumer Groups in Konnect using Kubernetes CRDs.

Provision a Data Plane client certificate in Konnect using the `KongDataPlaneClientCertificate` CRD.

Provision Keys and Key Sets in Konnect Gateway Manager using CRDs, and associate Keys with Key Sets.

Provision and manage Gateway Services and Routes in Konnect using KGO custom resources.

Create a Kong Route that does not have an attached Service. Useful when used with the Lambda plugin.

Provision a Vault in Konnect using the KongVault CRD and configure it for use with your Control Plane.

Provision an Upstream and attach Targets to it in Konnect using Kubernetes CRDs.

Enable a plugin on a Route in Konnect using the KongPlugin and KongPluginBinding CRDs and configure it for use with your Control Plane.

Provision a Dedicated Cloud Gateway Data Plane group configuration in Konnect using the `KonnectCloudGatewayDataPlaneGroupConfiguration` CRD.

Provision a Dedicated Cloud Gateway Network in Konnect using the `KonnectCloudGatewayNetwork` CRD.

How do I find out why my resources aren't being reconciled against Konnect?

Explore schemas of the available Custom Resources for Kong Operator

Answers to common questions about managing Konnect entities using the Operator.

How do I migrate from Kong Gateway Operator 1.4 to 1.5, taking in to account breaking changes?

Learn how to migrate your KonnectExtension resources to KonnectGatewayControlPlane before upgrading to KO 2.0.0.