Guides

Guides on writing and choosing Kapitan generators, consuming them safely, checking custom resources and moving from ingress-nginx to Gateway API.

• Checking custom resources against their CRDs

  Why JSON Schema checks miss rejected custom resources, how a throwaway kube-apiserver dry run catches them, and what to do when upstream ships no CRD YAML.

• How kadet-hub works

  How a Kapitan generator is gate-checked, published as an attested OCI artifact, verified by consumers, kept current and withdrawn when needed.

• Kapitan generator vs Helm chart vs Kustomize

  Choosing between a Kapitan kadet generator, the helm input, jinja2 templates and Kustomize, with concrete cases for each and the trade-offs.

• Migrate ingress-nginx to Gateway API with Kapitan

  Moving Kapitan targets from ingress-nginx Ingresses to Gateway API routes, side by side, with the annotation mapping and the defaults that differ.

• Supply-chain security for Kapitan generators

  Why a third-party Kapitan generator runs with your credentials at compile time, what kadet-hub checks before listing one, and how to consume generators safely.

• Writing a Kapitan generator

  How to write a reusable Kapitan kadet generator, test it in a sandbox like the kadet-hub gate does, and publish it as an attested OCI artifact.