Palette-Specific Namespaces and Pods
The page lists Palette-specific namespaces and the pods belonging to each namespace. The information is organized as follows:
- Namespace-pod mapping for Palette tenant clusters
- Namespace-pod mapping for Private Cloud Gateways (PCGs)
- Namespace-pod mapping for self-hosted Palette and VerteX management clusters
Palette Tenant Cluster Namespaces and Pods
| Namespace | Pod | Description |
|---|---|---|
capi-webhook-system | capi-controller-manager-<random-hash> | Upstream Cluster API (CAPI) namespace hosting controllers and webhooks for cluster lifecycle management. |
capi-kubeadm-bootstrap-controller-manager-<random-hash> | ||
capi-kubeadm-control-plane-controller-manager-<random-hash> | ||
cert-manager | cert-manager-<random-hash> | Upstream namespace hosting controllers and webhooks for Kubernetes certificate management. |
cert-manager-cainjector-<random-hash> | ||
cert-manager-webhook-<random-hash> | ||
cluster-<UUID> | capi-controller-manager-<random-hash> | Upstream CAPI controller for workload cluster lifecycle management. |
capi-kubeadm-bootstrap-controller-manager-<random-hash> | Upstream CAPI kubeadm bootstrap controller, which handles the generation and management of bootstrap data used to initialize nodes in the cluster. | |
capi-kubeadm-control-plane-controller-manager-<random-hash> | Upstream CAPI kubeadm control plane controller that manages workload cluster control plane components, ensuring the desired number of control plane nodes and handling upgrades and scaling operations. | |
capv-controller-manager-<random-hash> | Upstream CAPI Provider vSphere (CAPV) controller manager for vSphere resource lifecycle management. | |
cluster-management-agent-<random-hash> | Cluster management agent that connects the workload cluster to the management plane, reports metrics, and exposes cluster state for management operations. | |
cluster-management-agent-lite-<random-hash> | Lightweight variant of the cluster management agent that connects the cluster to the management plane and exposes basic state information for management operations. | |
metrics-server-<random-hash> | Upstream Kubernetes metrics server, which collects and exposes CPU and memory metrics from cluster nodes and pods for monitoring and autoscaling. | |
palette-controller-manager-<random-hash> | Palette controller manager that reconciles custom resources and orchestrates related components. | |
palette-lite-controller-manager-<random-hash> | Lightweight Palette controller manager that reconciles custom resources and orchestrates related components. | |
kube-system | calico-kube-controllers-<random-hash> | Upstream Kubernetes system namespace hosting core cluster services such as the Container Network Interface (CNI), Domain Name System (DNS), metrics, and proxy components. |
calico-node-<random-hash> | ||
coredns-<random-hash> | ||
etcd-vmdynamictest-cp-<random-hash> | ||
kube-apiserver-vmdynamictest-cp-<random-hash> | ||
kube-controller-manager-vmdynamictest-cp-<random-hash> | ||
kube-proxy-<random-hash> | ||
kube-scheduler-vmdynamictest-cp-<random-hash> | ||
kube-vip-vmdynamictest-cp-<random-hash> | ||
palette-system | palette-webhook-<random-hash> | Palette webhook that validates and defaults Palette custom resources. May be present depending on the installation type. |
reach-system | reach-controller-manager-<random-hash> | Reach controller manager that operates as a mutating admission webhook, injecting proxy settings, environment variables, volumes, and volume mounts into matching pods through ClusterPodPreset and PodPreset resources. Refer to Reach System for more information. |
spectro-task-<random-hash> | crony-<random-hash> | crony controller that runs OS upgrade and patching tasks on cluster nodes. |
Palette PCG Namespaces and Pods
| Namespaces | Pod | Description |
|---|---|---|
capi-webhook-system | capi-controller-manager-<random-hash> | Upstream CAPI namespace hosting controllers and webhooks for cluster lifecycle management. |
capi-kubeadm-bootstrap-controller-manager-<random-hash> | ||
capi-kubeadm-control-plane-controller-manager-<random-hash> | ||
capv-controller-manager-<random-hash> | ||
cert-manager | cert-manager-<random-hash> | Upstream namespace hosting controllers and webhooks for Kubernetes certificate management. |
cert-manager-cainjector-<random-hash> | ||
cert-manager-webhook-<random-hash> | ||
cluster-<UUID> | capi-controller-manager-<random-hash> | Upstream CAPI controller for workload cluster lifecycle management. |
capi-kubeadm-bootstrap-controller-manager-<random-hash> | Upstream CAPI kubeadm bootstrap controller, which handles the generation and management of bootstrap data used to initialize nodes in the cluster. | |
capi-kubeadm-control-plane-controller-manager-<random-hash> | Upstream CAPI kubeadm control plane controller that manages workload cluster control plane components, ensuring the desired number of control plane nodes and handling upgrades and scaling operations. | |
capv-controller-manager-<random-hash> | Upstream CAPV controller manager for vSphere resource lifecycle management. | |
capv-static-ip-controller-manager-<random-hash> | Upstream CAPV static IP controller, an infrastructure add-on that assigns and manages static IP addresses for vSphere-managed cluster nodes. | |
cluster-management-agent-<random-hash> | Cluster management agent that connects the workload cluster to the management plane, reports metrics, and exposes cluster state for management operations. | |
cluster-management-agent-lite-<random-hash> | Lightweight variant of the cluster management agent that connects the cluster to the management plane and exposes basic state information for management operations. | |
ipam-controller-manager-<random-hash> | Upstream CAPI IP Address Management (IPAM) controller manager, responsible for allocating and managing IP addresses for cluster resources. | |
palette-controller-manager-<random-hash> | Palette controller manager that reconciles custom resources and orchestrates related components. | |
palette-lite-controller-manager-<random-hash> | Lightweight Palette controller manager that reconciles custom resources and orchestrates related components. | |
jet-system | jet-<random-hash> | Spectro Cloud Jet component responsible for orchestrating cluster provisioning workflows. It runs within Palette or a PCG environment and triggers provisioning when a Spectro Provisioning Agent (SPA) resource is created. |
spectro-cloud-driver-<random-hash> | Jet controller pod that provisions clusters and deploys cluster management agents based on SPA resources. | |
kube-system | calico-kube-controllers-<random-hash> | Upstream Kubernetes system namespace hosting core cluster services such as the CNI, DNS, metrics, and proxy components. |
calico-node-<random-hash> | ||
etcd-gateway1-cp-<random-hash> | ||
kube-apiserver-gateway1-cp-<random-hash> | ||
kube-controller-manager-gateway1-cp-<random-hash> | ||
kube-proxy-<random-hash> | ||
kube-scheduler-gateway1-cp-<random-hash> | ||
kube-vip-gateway1-cp-<random-hash> | ||
vsphere-cloud-controller-manager-<random-hash> | ||
vsphere-csi-controller-<random-hash> | ||
vsphere-csi-node-<random-hash> | ||
palette-system | palette-webhook-<random-hash> | Palette webhook that validates and defaults Palette custom resources. May be present depending on the installation type. |
reach-system | reach-controller-manager-<random-hash> | Reach controller manager that operates as a mutating admission webhook, injecting proxy settings, environment variables, volumes, and volume mounts into matching pods through ClusterPodPreset and PodPreset resources. Refer to Reach System for more information. |
spectro-task-<random-hash> | crony-<random-hash> | crony controller that runs OS upgrade and patching tasks on cluster nodes. |
Self-Hosted Management Cluster Namespaces and Pods
| Namespace | Pod | Description |
|---|---|---|
capi-webhook-system | capi-controller-manager-<random-hash> | Upstream CAPI namespace hosting controllers and webhooks for cluster lifecycle management. |
capi-kubeadm-bootstrap-controller-manager-<random-hash> | ||
capi-kubeadm-control-plane-controller-manager-<random-hash> | ||
capv-controller-manager-<random-hash> | ||
ipam-controller-manager-<random-hash> | ||
cert-manager | cert-manager-<random-hash> | Upstream namespace hosting controllers and webhooks for Kubernetes certificate management. |
cert-manager-cainjector-<random-hash> | ||
cert-manager-webhook-<random-hash> | ||
cluster-<UUID> | capi-kubeadm-bootstrap-controller-manager-<random-hash> | Upstream CAPI kubeadm bootstrap controller, which handles the generation and management of bootstrap data used to initialize nodes in the cluster. |
capi-kubeadm-control-plane-controller-manager-<random-hash> | Upstream CAPI kubeadm control plane controller that manages workload cluster control plane components, ensuring the desired number of control plane nodes and handling upgrades and scaling operations. | |
capv-controller-manager-<random-hash> | Upstream CAPV controller manager for vSphere resource lifecycle management. | |
capv-static-ip-controller-manager-<random-hash> | Upstream CAPV static IP controller, an infrastructure add-on that assigns and manages static IP addresses for vSphere-managed cluster nodes. | |
cluster-management-agent-<random-hash> | Cluster management agent that connects the workload cluster to the management plane, reports metrics, and exposes cluster state for management operations. | |
cluster-management-agent-lite-<random-hash> | Lightweight variant of the cluster management agent that connects the cluster to the management plane and exposes basic state information for management operations. | |
ipam-controller-manager-<random-hash> | Upstream CAPI IP Address Management (IPAM) controller manager, responsible for allocating and managing IP addresses for cluster resources. | |
metrics-server-<random-hash> | Upstream Kubernetes metrics server, which collects and exposes CPU and memory metrics from cluster nodes and pods for monitoring and autoscaling. | |
palette-controller-manager-<random-hash> | Palette controller manager that reconciles custom resources and orchestrates related components. | |
palette-lite-controller-manager-<random-hash> | Lightweight Palette controller manager that reconciles custom resources and orchestrates related components. | |
cp-system | spectro-cp-ui-<random-hash> | Tenant-level Palette web interface. |
hubble-system | auth-<random-hash> | Component that authenticates users and agents, ensuring secure access to the system. |
cloud-<random-hash> | Component that integrates with cloud providers (AWS, Azure, and GCP) to retrieve and manage cloud resource information. | |
configserver-<random-hash> | Component that manages system configuration. | |
event-<random-hash> | Component that processes events generated by agents for cluster and Edge hosts, providing detailed information on operations conducted within the cluster. | |
foreq-<random-hash> | Service that forwards and proxies requests to various destinations based on URL patterns and configurations. Additionally, the service supports secure forwarding with Transport Layer Security (TLS) setup and custom headers. | |
hashboard-<random-hash> | Service that offers listing and search functionality for resources such as clusters, profiles, Edge hosts, and cloud accounts displayed in UI dashboards. | |
hutil-<random-hash> | Service that facilitates system-level utility operations, including initiating and managing scheduled tasks. | |
memstore-<random-hash> | Service that provides a distributed in-memory caching layer for Palette. It manages key-value stores with expiration, persistence, and distributed synchronization across service instances. The service also handles cache cleanup, data replication, and enables high-performance data access. | |
mgmt-<random-hash> | Service that manages system backup and restore operations and provides system information. | |
mongo-0 | Upstream replica pod of MongoDB. | |
mongo-1 | Upstream replica pod of MongoDB. | |
mongo-2 | Upstream replica pod of MongoDB. | |
oci-proxy-<random-hash> | Service that manages communication between Hubble and Open Container Initiative (OCI)-compliant registries, synchronizing content such as packs, Helm charts, and other OCI artifacts. | |
packsync-1 | Service that synchronizes Palette content packs across environments and registries. | |
spectro-tunnel-<random-hash> | Service that securely establishes and maintains remote cluster connectivity between Hubble and cluster nodes through gRPC-based reverse tunneling. | |
spectrocluster-<random-hash> | Service that handles cluster lifecycle management and oversees associated resources, including cloud accounts, registries, and cluster profiles. | |
spectrocluster-jobs-<random-hash> | Service that runs scheduled cluster lifecycle tasks to ensure continuous operation and maintenance. | |
spectrossh-<random-hash> | Service that provides Secure Shell (SSH) access to cluster nodes through the spectro-tunnel service, allowing administrators to connect securely without exposing nodes publicly. | |
system-<random-hash> | Service that allows system administrators to manage and configure system settings. | |
timeseries-<random-hash> | Service that collects and manages usage metrics for pods and machines in clusters, allowing users to view resource utilization for their workloads. | |
user-<random-hash> | Service that provides centralized management of users, tenants, projects, teams, and Role-Based Access Control (RBAC). | |
ingress-traefik | traefik-ingress-controller-<random-hash> | Namespace that contains the Traefik ingress controller pods. Traefik is the sole management cluster ingress controller. |
jet-system | jet-<random-hash> | Spectro Cloud Jet component responsible for orchestrating cluster provisioning workflows. It runs within Palette or a PCG environment and triggers provisioning when an SPA resource is created. |
kube-system | calico-kube-controllers-<random-hash> | Upstream Kubernetes system namespace hosting core cluster services such as the CNI, DNS, metrics, and proxy components. |
calico-node-<random-hash> | ||
calico-node-w-<random-hash> | ||
coredns-<random-hash> | ||
etcd-vsphere-spectro-mgmt-cp-<random-hash> | ||
kube-apiserver-vsphere-spectro-mgmt-cp-<random-hash> | ||
kube-controller-manager-vsphere-spectro-mgmt-cp-<random-hash> | ||
kube-proxy-bl-<random-hash> | ||
kube-proxy-l-<random-hash> | ||
kube-scheduler-vsphere-spectro-mgmt-cp-<random-hash> | ||
kube-vip-vsphere-spectro-mgmt-cp-<random-hash> | ||
vsphere-cloud-controller-manager-<random-hash> | ||
vsphere-csi-controller-df-<random-hash> | ||
vsphere-csi-node-<random-hash> | ||
vsphere-csi-node-rhm-<random-hash> | ||
palette-system | palette-webhook-<random-hash> | Palette webhook that validates and defaults Palette custom resources. May be present depending on the installation type. |
piraeus-system | linstor-controller-<random-hash> | Upstream LINSTOR controller. May be present depending on the installation type. |
linstor-csi-controller-<random-hash> | Upstream LINSTOR Container Storage Interface (CSI) controller that provides dynamic volume provisioning and attachment for Kubernetes workloads. May be present depending on the installation type. | |
piraeusoperator-piraeus-controller-manager-<random-hash> | Upstream Piraeus operator controller that manages deployment and configuration of LINSTOR components and CSI controllers within the cluster. May be present depending on the installation type. | |
spectro-task-<random-hash> | ||
crony-<random-hash> | Component responsible for OS upgrades and patching on cluster nodes. | |
ui-system | spectro-ui-<random-hash> | Service that provides the Palette web UI. |
zot-system | zot-<random-hash> | Upstream Zot service providing an OCI registry. May be present depending on the installation type. |