All NewsSecurity

etcd-operator joins Cozystack with a new v1alpha2 API

Discover the new v1alpha2 API for etcd-operator, enhancing your Kubernetes cluster management.

06 / 29 / 2026Source: Security
Test ingest layout blocks
Feature image

News

What happened

The etcd-operator project has transitioned to the Cozystack project, introducing a new v1alpha2 API that significantly improves how you manage etcd clusters. This change means you can leverage a more robust and flexible operator for your Kubernetes deployments.

The etcd-operator, which simplifies the deployment and maintenance of etcd clusters on Kubernetes, has been donated to the Cozystack project. Along with this donation, a new implementation has been released under the v1alpha2 API, replacing the previous v1alpha1 version. This new version enhances cluster management by utilizing etcd's native Membership API, allowing for more direct control over cluster membership and operations. If you rely on etcd for your homelab, this update is crucial for optimizing your cluster's performance and reliability.

Release at a glance

Key facts from the announcement.

Version

v1alpha2

Product

etcd-operator

Platform

Kubernetes

License

Apache 2.0

REMOTE ACCESS

Protect Your Admin Sessions

A zero-exposure architecture secures your server. A VPN secures you — encrypting your connection when managing infrastructure from untrusted networks, coffee shops, or travel. NordVPN is what we use for this layer.

Try NordVPN

This is an affiliate link. If you purchase, I earn a commission at no extra cost to you.

Changes at a glance

What's new

The new v1alpha2 API introduces a more efficient way to manage etcd clusters by using the native Membership API for operations. This allows for independent management of each cluster member, enhancing your control over cluster dynamics and scaling.

You will also benefit from features like TLS management, automatic certificate renewal, and improved snapshot capabilities, all of which contribute to a more resilient and manageable etcd setup in your homelab.

Breaking changes

Migration from the previous v1alpha1 implementation requires using the etcd-migrate tool to adopt the new operator without data loss or downtime.

Analysis

In detail

The new etcd-operator is now available under the API group etcd-operator.cozystack.io/v1alpha2, superseding the previous etcd.aenix.io/v1alpha1. This version introduces a more efficient architecture that directly interacts with etcd's Membership API, allowing for operations like MemberAdd, MemberPromote, and MemberRemove to be executed seamlessly. Unlike the previous implementation that relied on StatefulSets, the new operator manages each cluster member independently through the EtcdMember resource, which enhances flexibility and control over your cluster's state.

Key features of the new operator include the ability to bootstrap and scale clusters one member at a time, graceful removal of members, and the option to pause clusters without data loss. The operator also supports independent TLS configurations, automatic certificate management via cert-manager, and snapshot capabilities to S3 or PVCs. Migration from the old operator to the new one can be done in place using the etcd-migrate tool, ensuring minimal disruption to your existing setup.

The project is written in Go and distributed under the Apache 2.0 license, continuing the legacy of the previous codebase while introducing significant improvements. The new implementation is designed to align with the roadmap of the official etcd-operator, with many features already implemented, while some are still in progress.

Key takeaways

The most important facts from this update.

You can now manage etcd clusters using the new etcd-operator.cozystack.io/v1alpha2 API.
You will utilize the EtcdMember resource for independent management of cluster members.
You can bootstrap and scale your cluster one member at a time with graceful removal.
TLS configurations can be managed independently for client and peer connections.
You can take snapshots to S3 or PVCs and restore clusters from these snapshots.
The migration process to the new operator is designed to be seamless and non-disruptive.

Why it matters

This update is significant for your self-hosted infrastructure as it provides a more robust and flexible way to manage etcd clusters. The new API and features enhance the reliability and performance of your deployments, allowing for better scaling and maintenance.

Homelab impact

With the transition to the new etcd-operator, your Kubernetes deployments can achieve improved management of etcd clusters, which is crucial for maintaining data consistency and availability. The ability to scale and manage members independently means you can adapt your cluster more effectively to changing workloads.

Additionally, the enhanced TLS management and snapshot capabilities will strengthen your security posture and data recovery options. As you upgrade to the new version, you can expect a smoother operation with less downtime, making it easier to maintain your homelab's infrastructure.

What to do next

Practical steps for operators running self-hosted stacks.

Review the migration guide to understand the transition process.
Test the new v1alpha2 API in a staging environment before deploying to production.
Update your deployment scripts to utilize the new EtcdMember resource.
Familiarize yourself with the new features, especially TLS management and snapshotting.
Monitor your etcd clusters closely after the upgrade to ensure stability.

This brief covers what you need from CNCF Blog's reporting. Visit the original post for release notes, changelogs, and full technical documentation.

Self HostingSecurityInfrastructureNetworking