Crossplane Integrations

Crossplane Providers are Kubernetes controllers for external APIs. Official providers: AWS (100+ resources), Azure (80+), GCP (70+), Kubernetes (core), Alibaba, IBM Cloud, Oracle Cloud. Community providers: Datadog, New Relic, PagerDuty, Cloudflare, GitHub, GitLab, Vault, Consul, RabbitMQ, Kafka, Redis, PostgreSQL, MySQL.

AWS: RDS, EKS, S3, IAM, VPC, Lambda, CloudFront, Route53, ACM, Secrets Manager. Azure: AKS, PostgreSQL, Storage, Key Vault, Container Registry. GCP: Cloud SQL, GKE, Cloud Storage, Secret Manager, Artifact Registry. All resources as Kubernetes CRDs.

Crossplane runs in-cluster. Resources managed via kubectl, kustomize, helm, ArgoCD, Flux. GitOps with ArgoCD/Flux syncing Crossplane resources. Policy with OPA/Gatekeeper/Kyverno. Admission webhooks for validation. Metrics via Prometheus.

Composite Resource Definitions (XRDs) define custom APIs. Compositions implement XRDs with multiple managed resources. Function pipelines (KCL, Go, Python) for transformation. Claim-based provisioning: developers create Claims; platform team manages Compositions.

ArgoCD and Flux manage Crossplane resources like any K8s resource. Image automation with Flux Image Reflector/Automation. Renovate for provider updates. CI/CD pipelines test Compositions with kind/k3d. Crossplane CLI for local development.

OPA/Gatekeeper constraint templates for Crossplane resources. Kyverno policies for mutating/validating. Composition validation at apply time. Cost estimation via Infracost integration. Drift detection via Kubernetes reconciliation.

Kubernetes Secrets, External Secrets Operator, Sealed Secrets, HashiCorp Vault CSI, AWS Secrets Manager CSI, Azure Key Vault CSI, GCP Secret Manager CSI. Provider credentials via Kubernetes Secrets or IRSA/Workload Identity.

Prometheus metrics for Crossplane controllers. Grafana dashboards for provider health, composition status, reconciliation latency. Structured logging. Distributed tracing via OpenTelemetry. Upbound Cloud adds managed observability.