Philip LaineandGitHub ea2dafd5a3 Add network egress resource (#357)
This change adds a new import resource which enables exposing Netbird
resources as Kubernetes services. This remove the need to add sidecars
to every pod.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added a new `NetworkEgress` custom resource (`netbird.io/v1alpha1`)
with CRD, schema validation, and status/conditions.
* Extended controller functionality to create egress services and
translate egress rules into import `EndpointSlice` resources; egress
pods now include a kube-egress-forwarder sidecar.
* **Bug Fixes**
* Added missing deep-copy and declarative apply support for the new
`NetworkEgress` API types.
* **Documentation**
* Updated README/API reference and added example manifests for
`NetworkEgress` (including IP/FQDN target usage).
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Signed-off-by: Philip Laine <philip.laine@gmail.com>
2026-07-17 08:06:53 +02:00
2026-07-17 08:06:53 +02:00
2026-07-17 08:06:53 +02:00
2026-07-17 08:06:53 +02:00
2026-05-05 12:59:36 +02:00
2026-07-17 08:06:53 +02:00
2026-06-01 16:06:57 +02:00
2025-03-19 15:12:18 +01:00
2026-07-17 08:06:53 +02:00
2026-07-17 08:06:53 +02:00
2025-01-24 13:01:03 +01:00
2026-07-17 08:06:53 +02:00
2026-07-17 08:06:53 +02:00

NetBird Kubernetes Operator

The NetBird Kubernetes Operator automates the provisioning of NetBird network access for services running in your cluster. It extends the Kubernetes API with CRDs, letting you manage NetBird peers, routes, and groups declaratively, the same way you manage the rest of your infrastructure.

Features

  • Declarative peer management - define NetBird peers as Kubernetes resources and let the operator handle provisioning and lifecycle
  • Automatic secret management - setup keys and credentials are stored and rotated as Kubernetes secrets
  • Namespace-scoped or cluster-wide - deploy per-namespace for multi-tenant clusters or cluster-wide for full coverage
  • Works with any NetBird deployment - compatible with NetBird Cloud and self-hosted instances

Getting Started

For full setup instructions, see the Getting Started documentation.

Once your secret is configured, install the operator with Helm.

helm upgrade --install --create-namespace -n netbird netbird-operator oci://ghcr.io/netbirdio/helm-charts/netbird-operator

API

Kind API Version
SetupKey netbird.io/v1alpha1
Group netbird.io/v1alpha1
NetworkRouter netbird.io/v1alpha1
NetworkResource netbird.io/v1alpha1
NetworkEgress netbird.io/v1alpha1
SidecarProfile netbird.io/v1alpha1
ClusterProxy netbird.io/v1alpha1
S
Description
Kubernetes operator for Netbird
Readme BSD-3-Clause
1.2 MiB
Languages
Go 97.8%
Makefile 1.2%
Go Template 0.9%
Dockerfile 0.1%