Skip to content

Overview

The UDS Operator manages the lifecycle of UDS custom resources and their associated Kubernetes resources. It uses Pepr to watch for changes and reconcile desired state.

Package CR

Defines networking, SSO, and monitoring for workloads in a namespace. One Package per namespace.

Exemption CR

Grants policy exemptions for specific workloads by namespace and pod matcher.

Clusterconfig CR

Cluster-wide operator configuration.

Policy Engine

Pepr policies enforced by UDS Core — validating, mutating, and what each policy enforces.

For IDE validation, use the published JSON schemas: