Recipes
Production-ready Kubernetes infrastructure templates and boilerplates
Browse our collection of infrastructure recipes. Each recipe is a tested, production-ready template that you can copy and customize for your needs.
App
Simple application — Deployment + Service + Endpoint.
Auth
Identity and access management — Keycloak with database, TLS, and routing.
Backup
Backup — scheduled cluster backups with Velero.
CertManager
CertProvider
CertProvider — cluster-level certificate management. Sets up cert-manager for TLS certificates. All Endpoint/App children automatically get TLS certificates when tls prop is set.
DatabaseBackup
Continuous + scheduled backup configuration for a dedicated CNPG cluster. Renders `spec.backup.barmanObjectStore` on the Cluster plus a ScheduledBackup resource. Backup is explicit opt-in — nothing renders unless this prop is set.
Database
CloudNativePG PostgreSQL database.
DnsProvider
DnsProvider — cluster-level DNS configuration. Sets up ExternalDNS with the specified provider and credentials. All Endpoint/App children automatically create DNS records.
EndpointProvider
EndpointProvider — cluster-level routing configuration. Sets whether endpoints use nginx Ingress or Envoy Gateway (Gateway API). All Endpoint/App children read this context.
Endpoint
Endpoint — cluster-adaptive routing for a service.
Monitoring
Application monitoring — Prometheus ServiceMonitor for your app.
Platform
Platform — cluster-level configuration wrapper.
R8sCluster
R8sCluster — opinionated cluster foundation with all recommended operators.
ManualSecrets
SecretProvider
SecretProvider — cluster-level secrets backend. All Database, Auth, and other secret-consuming children use this backend. Automatically declares the required operator (VSO for vault/openbao).
Web Service
Simple web service (backend or frontend).
Looking for something else?
These recipes are built with r8s components. You can combine them, customize them, or create your own. Check out the Core Concepts to learn how to build custom recipes.