Platform Addons
Each addon is enabled from the cluster definition using the feature flag label enable_<feature> (shown below as enable_...).
GitOps
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| argo-events | argocd | enable_argo_events | Event-driven workflow automation framework for Kubernetes. | docs | addons/helm/oss.yaml |
| argo-rollouts | argocd-rollouts | enable_argo_rollouts | Progressive delivery controller for canary, blue-green, and experiments. | docs | addons/helm/oss.yaml |
| argo-workflows | argo-workflows | enable_argo_workflows | Workflow engine for orchestrating parallel jobs on Kubernetes. | docs | addons/helm/oss.yaml |
| argo-cd | argocd | enable_argocd | Declarative GitOps continuous delivery tool for Kubernetes. | docs | addons/helm/oss.yaml |
| argocd-notifications | argocd | enable_argocd_notifications | Enables ArgoCD to send notifications (Slack, Email, etc.) for application events. | docs | addons/helm/oss.yaml |
| argo-workflows | argocd | enable_aws_argo_workflows_ingress | Argo Workflows chart configured with AWS-oriented ingress patterns. | docs | addons/helm/cloud/aws.yaml |
| argo-cd | argocd | enable_aws_argocd | Argo CD release tuned for AWS reference architectures. | docs | addons/helm/cloud/aws.yaml |
| argo-cd | argocd | enable_aws_argocd_ingress | Argo CD with ingress settings for AWS load balancers and DNS. | docs | addons/helm/cloud/aws.yaml |
Security
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-privateca-issuer | cert-manager | enable_aws_privateca_issuer | cert-manager issuer for AWS Private Certificate Authority. | docs | addons/helm/cloud/aws.yaml |
| secrets-store-csi-driver-provider-aws | kube-system | enable_aws_secrets_store_csi_driver_provider | AWS provider for the Secrets Store CSI Driver (Secrets Manager / Parameter Store). | docs | addons/helm/cloud/aws.yaml |
| cert-manager | cert-manager | enable_cert_manager | Automates TLS certificate issuance and renewal in Kubernetes. | docs | addons/helm/oss.yaml |
| external-secrets | external-secrets | enable_external_secrets | Integrates external secret stores with Kubernetes Secrets. | docs | addons/helm/oss.yaml |
| kyverno | kyverno-system | enable_kyverno | Kubernetes-native policy engine for admission control and reporting. | docs | addons/helm/oss.yaml |
| kyverno-policies | kyverno-system | enable_kyverno_policies | Opinionated Kyverno policies for the platform (chart in this repository). | docs | addons/helm/oss.yaml |
| secrets-store-csi-driver | kube-system | enable_secrets_store_csi_driver | Mounts secrets from external stores into pods as volumes. | docs | addons/helm/oss.yaml |
Kustomize
| Path | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| base | cert-manager | enable_cert_manager | Patched cert-manager overlay including self-signed ClusterIssuer. | docs | addons/kustomize/oss/cert-manager/kustomize.yaml |
| base | kube-system | enable_core | Default cluster roles for downstream SSO EKS access bindings | docs | addons/kustomize/oss/cluster-roles/kustomize.yaml |
| base | external-secrets | enable_external_secrets | AWS ClusterSecretStore and related wiring for External Secrets. | docs | addons/kustomize/aws/external_secrets/kustomize.yaml |
Networking
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-gateway-controller-chart | kube-system | enable_aws_gateway_api_controller | AWS Gateway API controller for VPC Lattice-backed HTTP routes. | docs | addons/helm/cloud/aws.yaml |
| aws-load-balancer-controller | ingress-system | enable_aws_load_balancer | AWS Load Balancer Controller for ALB/NLB and Gateway API integration. | docs | addons/helm/cloud/aws.yaml |
| cilium | cilium-system | enable_cilium | eBPF-based CNI, service mesh, and network security for Kubernetes. | docs | addons/helm/oss.yaml |
| gateway-helm | ingress-system | enable_envoy_gateway | Envoy-based implementation of the Kubernetes Gateway API for ingress and service mesh. | docs | addons/helm/oss.yaml |
| external-dns | kube-system | enable_external_dns | Synchronizes Kubernetes Services and Ingresses with DNS providers. | docs | addons/helm/oss.yaml |
| kgateway | ingress-system | enable_kgateway | Kubernetes Gateway API controller for advanced Ingress and service mesh capabilities. | docs | addons/helm/oss.yaml |
| — | ingress-system | enable_kgateway_crds | The CRDs for Kubernetes Gateway API, a next-generation Ingress API for Kubernetes. | docs | addons/helm/oss.yaml |
| tailscale-operator | tailscale | enable_tailscale_operator | Provides the tailscale operator | docs | addons/helm/oss.yaml |
Kustomize
| Path | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| https://github.com/kubernetes-sigs/gateway-api@config/crd | kube-system | enable_gateway_api | Gateway API CRDs for ingress and mesh-style routing. | docs | addons/kustomize/oss/gateway_api/kustomize.yaml |
Observability
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-cloudwatch-metrics | kube-system | enable_aws_cloudwatch_metrics | CloudWatch agent for cluster and node metrics on EKS. | docs | addons/helm/cloud/aws.yaml |
| aws-fargate-fluentbit | kube-system | enable_aws_fargate_fluentbit | Fluent Bit configuration for Fargate log routing to CloudWatch. | docs | addons/helm/cloud/aws.yaml |
| aws-for-fluent-bit | kube-system | enable_aws_for_fluentbit | Fluent Bit log router shipping container logs to CloudWatch Logs. | docs | addons/helm/cloud/aws.yaml |
| grafana | grafana | enable_grafana | Visualization and alerting platform for metrics and logs from Kubernetes. | docs | addons/helm/oss.yaml |
| kube-prometheus-stack | prometheus | enable_kube_prometheus_stack | Prometheus, Grafana, Alertmanager, and kube-state-metrics bundle. | docs | addons/helm/oss.yaml |
| metrics-server | kube-system | enable_metrics_server | Cluster-wide aggregator of resource usage metrics for HPA and kubectl top. | docs | addons/helm/oss.yaml |
| prometheus-adapter | prometheus | enable_prometheus_adapter | Exposes Prometheus metrics as custom metrics for the Kubernetes HPA. | docs | addons/helm/oss.yaml |
Cost
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| kubecost | kubecost | enable_kubecost | Kubernetes cost monitoring and allocation. | docs | addons/helm/oss.yaml |
| opencost | opencost | enable_opencost | Open source cost monitoring for Kubernetes workloads. | docs | addons/helm/oss.yaml |
Storage
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-ebs-csi-classes | kube-system | enable_aws_ebs_csi_resources | Default StorageClass and related helpers for AWS EBS CSI volumes. | docs | addons/helm/cloud/aws.yaml |
| aws-efs-csi-driver | kube-system | enable_aws_efs_csi_driver | CSI driver for Amazon EFS file systems. | docs | addons/helm/cloud/aws.yaml |
| aws-fsx-csi-driver | kube-system | enable_aws_fsx_csi_driver | CSI driver for Amazon FSx for Lustre file systems. | docs | addons/helm/cloud/aws.yaml |
| velero | velero | enable_aws_velero | Backup and migrate cluster resources and persistent volumes. | docs | addons/helm/cloud/aws.yaml |
Kustomize
| Path | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| base | kube-system | enable_core | Used to provision a storage class for data volumes | docs | addons/kustomize/aws/storageclass/kustomize.yaml |
Compute
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-node-termination-handler | kube-system | enable_aws_node_termination_handler | Gracefully drains nodes on EC2 spot interruption and maintenance events. | docs | addons/helm/cloud/aws.yaml |
| cluster-autoscaler | kube-system | enable_cluster_autoscaler | Automatically adjusts the number of nodes in a cluster. | docs | addons/helm/oss.yaml |
| karpenter-nodepools | kube-system | enable_karpenter_nodepools | Platform chart defining Karpenter NodePools and related objects. | docs | addons/helm/cloud/aws.yaml |
| vpa | kube-system | enable_vpa | Automatically adjusts CPU and memory requests for running pods. | docs | addons/helm/oss.yaml |
Workloads
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| keda | keda-system | enable_keda | Event-driven autoscaling for workloads and HTTP traffic. | docs | addons/helm/oss.yaml |
| volcano | volcano-system | enable_volcano | Batch scheduler for high-performance workloads and AI/ML jobs. | docs | addons/helm/oss.yaml |
AWS
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| aws-controllers-k8s/acm-chart | ack-system | enable_aws_ack_acm | ACK controller for AWS Certificate Manager. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/apigatewayv2-chart | ack-system | enable_aws_ack_apigatewayv2 | ACK controller for Amazon API Gateway v2. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/dynamodb-chart | ack-system | enable_aws_ack_dynamodb | ACK controller for Amazon DynamoDB. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/eks-chart | ack-system | enable_aws_ack_eks | ACK controller for Amazon EKS. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/eventbridge-chart | ack-system | enable_aws_ack_eventbridge | ACK controller for Amazon EventBridge. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/iam-chart | ack-system | enable_aws_ack_iam | ACK controller for AWS IAM. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/prometheusservice-chart | ack-system | enable_aws_ack_prometheusservice | ACK controller for Amazon Managed Service for Prometheus. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/rds-chart | ack-system | enable_aws_ack_rds | ACK controller for Amazon RDS. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/s3-chart | ack-system | enable_aws_ack_s3 | ACK controller for Amazon S3. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/ses-chart | ack-system | enable_aws_ack_ses | ACK controller for Amazon SES. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/sfn-chart | ack-system | enable_aws_ack_sfn | ACK controller for AWS Step Functions. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/sns-chart | ack-system | enable_aws_ack_sns | ACK controller for Amazon SNS. | docs | addons/helm/cloud/aws.yaml |
| aws-controllers-k8s/sqs-chart | ack-system | enable_aws_ack_sqs | ACK controller for Amazon SQS. | docs | addons/helm/cloud/aws.yaml |
| crossplane-aws | crossplane-system | enable_aws_crossplane_provider | Crossplane AWS provider bundle for GitOps Bridge-style installs. | docs | addons/helm/cloud/aws.yaml |
| crossplane-aws-upbound | crossplane-system | enable_aws_crossplane_upbound_provider | Upbound AWS provider family for Crossplane on EKS. | docs | addons/helm/cloud/aws.yaml |
Kustomize
| Path | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| base | ack-system | enable_aws_ack_dynamodb | IAM roles and Pod Identity associations for the DynamoDB ACK controller. | docs | addons/kustomize/aws/aws_ack_dynamodb/kustomize.yaml |
| base | ack-system | enable_aws_ack_prometheusservice | IAM roles and Pod Identity associations for the Amazon Managed Prometheus ACK controller. | docs | addons/kustomize/aws/aws_ack_prometheusservice/kustomize.yaml |
| base | ack-system | enable_aws_ack_s3 | IAM roles and Pod Identity associations for the S3 ACK controller. | docs | addons/kustomize/aws/aws_ack_s3/kustomize.yaml |
Platform
Helm
| Chart | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| — | kro-system | enable_kro | Kubernetes Resource Orchestrator for managing groups of custom resources. | docs | addons/helm/oss.yaml |
| terranetes-controller | terranetes-system | enable_terranetes | Terranetes controller for provisioning cloud resources from Kubernetes. | docs | addons/helm/oss.yaml |
Kustomize
| Path | Namespace | Feature flag | Description | Link | Source |
|---|---|---|---|---|---|
| base | kube-system | enable_core | Deploy priority classes to the kube-system namespace | docs | addons/kustomize/oss/priorityclass/kustomize.yaml |
| base | terraform-system | enable_terranetes | Used to provision the various addons for the Terranetes platform | docs | addons/kustomize/oss/terranetes/kustomize.yaml |
| https://github.com/appvia/terranetes-cloudresources.git@cloudresources/aws/ | terraform-system | enable_terranetes_crs | A collection of Terranetes Cloud Resource Plans | docs | addons/kustomize/oss/terranetes-cr/kustomize.yaml |