You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Strengthen K8s Operator blog post for launch readiness
- Add compelling opening hook with repo link and value proposition
- Add 'What is DocumentDB?' section: Linux Foundation governance, MIT license,
PostgreSQL advantage, zero-code-change driver compatibility
- Include all 4 TLS modes (was missing Disabled)
- Add concrete failover timing: 5-15s unplanned, 2-5s planned
- List all kubectl plugin commands: status, health, events, promote
- Add new section on modern workloads: vector search, change streams
- Strengthen 'Why try it now' with cost narrative and audience targeting
- Improve CTA: add main repo links, engine repo, contribution invitation
- Add SEO tags: MongoDB Alternative, PostgreSQL, Multi-Cloud Database
- Improve meta description for search discoverability
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
description: Preview an open-sourceoperator that brings declarative deployment, secure connectivity, high availability, backup and restore, and multi-environment deployment patterns to DocumentDB on Kubernetes.
3
+
description: Run MongoDB workloads on PostgreSQL, anywhere Kubernetes runs. Preview the open-source, MIT-licensed operator that brings automated high availability, multi-cloud replication, backup and restore, and enterprise security to DocumentDB on Kubernetes.
4
4
date: 2026-03-19
5
5
featured: true
6
6
author: DocumentDB team
@@ -10,24 +10,35 @@ tags:
10
10
- Operator
11
11
- DocumentDB
12
12
- Open Source
13
+
- MongoDB Alternative
14
+
- PostgreSQL
15
+
- Multi-Cloud Database
13
16
---
14
-
Running a document database on Kubernetes should not require a maze of hand-built scripts for failover, certificate handling, backup jobs, and day-two troubleshooting. The new DocumentDB Kubernetes Operator is designed to turn that operational work into a Kubernetes-native workflow.
17
+
MongoDB compatibility. PostgreSQL reliability. Kubernetes simplicity. The new [DocumentDB Kubernetes Operator](https://github.com/documentdb/documentdb-kubernetes-operator) brings all three together in a single open-source project — and it is available today as a public preview.
15
18
16
-
DocumentDB is the engine powering vCore-based Azure Cosmos DB for MongoDB. Built on PostgreSQL, it provides a native document-oriented NoSQL database with support for CRUD operations on BSON data types. The Kubernetes Operator runs and manages DocumentDB on Kubernetes: when you deploy a cluster, it creates and manages PostgreSQL instances, the DocumentDB Gateway, and the supporting Kubernetes resources around them. Because the gateway enables MongoDB-compatible drivers, APIs, and tools, teams can keep working with familiar clients such as `mongosh`.
19
+
Running a document database on Kubernetes should not require a maze of hand-built scripts for failover, certificate handling, backup jobs, and day-two troubleshooting. The DocumentDB Kubernetes Operator turns that operational work into a Kubernetes-native workflow: declare what you want, and the operator reconciles the rest.
20
+
21
+
## What is DocumentDB?
22
+
23
+
[DocumentDB](https://github.com/documentdb/documentdb) is the engine powering vCore-based Azure Cosmos DB for MongoDB. Built on PostgreSQL, it provides a native document-oriented NoSQL database with support for CRUD operations on BSON data types. The project is governed by the **Linux Foundation** with a Technical Steering Committee that includes representatives from Microsoft, Amazon, AB InBev, Rippling, and YugabyteDB.
24
+
25
+
Building on PostgreSQL means DocumentDB inherits decades of enterprise reliability, a vast ecosystem of operational tooling, and a talent pool far larger than any single NoSQL database. It also means no SSPL licensing constraints — **DocumentDB and the Kubernetes Operator are both fully open-source under the MIT license**.
26
+
27
+
The Kubernetes Operator runs and manages DocumentDB on Kubernetes: when you deploy a cluster, it creates and manages PostgreSQL instances, the [DocumentDB Gateway](https://github.com/documentdb/documentdb/tree/main/pg_documentdb_gw), and the supporting Kubernetes resources around them. Because the gateway provides full MongoDB wire protocol compatibility, existing MongoDB drivers — PyMongo, Node.js, Java, Go, C++ — **connect without code changes**. Teams swap a connection string, not their application.
17
28
18
29
## Why this matters
19
30
20
-
Kubernetes teams have strong patterns for stateless applications, but data services often still depend on custom runbooks and fragile operational glue. The DocumentDB Kubernetes Operator closes that gap for DocumentDB by giving platform teams a single declarative control surface for deployment, availability, security, and recovery.
31
+
Kubernetes teams have strong patterns for stateless applications, but data services often still depend on custom runbooks and fragile operational glue. The DocumentDB Kubernetes Operator closes that gap by giving platform teams a single declarative control surface for deployment, availability, security, and recovery — with zero database licensing fees.
21
32
22
33
With the preview release, you can:
23
34
24
-
-install the operator with Helm
25
-
-have the Helm chart install CloudNativePG as a dependency
26
-
-deploy DocumentDB through a Kubernetes custom resource
27
-
-connect with `mongosh`and other MongoDB-compatible tooling
28
-
-manage backup, restore, TLS, and promotion workflows through Kubernetes-native APIs
35
+
-Install the operator with a single Helm command (CloudNativePG is included as a dependency)
36
+
-Deploy a DocumentDB cluster through a Kubernetes custom resource
37
+
-Connect with `mongosh` and any MongoDB-compatible driver or tool
38
+
-Manage backup, restore, TLS, and promotion workflows through Kubernetes-native APIs
39
+
-Deploy across Azure AKS, AWS EKS, Google GKE, or on-premises Kubernetes
29
40
30
-
## From quickstart to useful data fast
41
+
## From zero to a live MongoDB-compatible endpoint
31
42
32
43
The quickstart is intentionally direct. Install `cert-manager`, install the operator, create a Secret for gateway credentials, and apply a `DocumentDB` resource. The public preview docs target Kubernetes 1.35+ and call out local development with `kind` (v0.31+) and `minikube`, while also showing cloud-friendly access patterns through `LoadBalancer` services on AKS, EKS, and GKE.
33
44
@@ -50,42 +61,55 @@ spec:
50
61
serviceType: ClusterIP
51
62
```
52
63
53
-
Once the cluster reports a healthy state, you can connect locally with port forwarding or expose it through a load balancer in supported environments. The result is a much shorter path from cluster creation to a live MongoDB-compatible endpoint.
64
+
Once the cluster reports a healthy state, you can connect locally with port forwarding or expose it through a load balancer in supported environments. The result is a much shorter path from cluster creation to a live MongoDB-compatible endpoint — ready for `mongosh`, PyMongo, or any MongoDB driver your team already uses.
54
65
55
66
## Built for day-two operations
56
67
57
68
Bringing up a cluster is only the beginning, so the operator is opinionated about day-two workflows as well.
58
69
59
-
Set `instancesPerNode: 3` and the operator creates one primary instance and two replicas for local high availability and automatic failover. Use `Backup` and `ScheduledBackup` resources for on-demand and scheduled backups, retention policies, and restore workflows into a new cluster. And when operators need visibility into what is happening, the `kubectl documentdb` plugin adds purpose-built commands for status inspection, event triage, and primary promotion.
70
+
Set `instancesPerNode: 3` and the operator creates one primary instance and two replicas for local high availability. If the primary fails, a replica is promoted automatically — typically within **5 to 15 seconds** for unplanned failures, and **2 to 5 seconds** for planned switchovers. Use `Backup` and `ScheduledBackup` resources for on-demand and scheduled backups with retention policies, and restore into a new cluster when needed. And when operators need visibility, the `kubectl documentdb` plugin provides purpose-built commands: `status` for cluster health and connection strings, `health` for node and replication details, `events` for streaming Kubernetes events, and `promote` for controlled primary promotion.
71
+
72
+
That makes the operator valuable not only for first deployment, but for the operational rhythm that follows: health checks, recovery planning, planned changes, and repeatable workflows that fit naturally into Kubernetes.
60
73
61
-
That makes the operator interesting not only for first deployment, but for the operational rhythm that follows: health checks, recovery planning, planned changes, and repeatable workflows that fit naturally into Kubernetes.
74
+
## Security and connectivity built in
62
75
63
-
## Security and connectivity without reinventing the basics
76
+
Secure connectivity is part of the model from the start. The DocumentDB gateway always encrypts client connections; the `spec.tls.gateway.mode` field controls how the operator manages certificates. Four modes cover the full spectrum of deployment environments:
64
77
65
-
Secure connectivity is built into the model from the start. The DocumentDB gateway always encrypts client connections; the TLS mode controls how certificates are managed. In practice, that means teams can choose the workflow that matches their environment:
78
+
- `Disabled`— the gateway still encrypts connections using an internally generated certificate; ideal for quick development setups
79
+
- `SelfSigned`— the operator generates and manages self-signed certificates for development and test environments
80
+
- `CertManager`— integrates with cert-manager for clusters that already standardize on it
81
+
- `Provided`— bring your own certificates for organizations that manage PKI processes independently
66
82
67
-
- `SelfSigned`for development and test environments
68
-
- `CertManager`for clusters that already standardize on cert-manager
69
-
- `Provided`for organizations that manage certificates through their own PKI processes
83
+
The same declarative pattern carries into networking. The operator supports local development through `ClusterIP` plus port forwarding, and cloud exposure through `LoadBalancer` services with cloud-specific annotations for AKS, EKS, and GKE. Teams declare the configuration they need instead of reinventing it.
70
84
71
-
The same pattern carries into networking. The docs cover local development through `ClusterIP` plus port forwarding, and cloud exposure through `LoadBalancer` services where that model makes sense. The operator keeps those choices declarative instead of forcing each team to reinvent them.
85
+
## Multi-cloud and multi-environment deployment
72
86
73
-
## A practical path to multi-environment deployment
87
+
The operator is designed to run across multiple cloud providers and Kubernetes distributions. The multi-cluster guidance includes a documented KubeFleet-based deployment pattern spanning AKS and on-premises Kubernetes clusters, as well as an Istio-based pattern for true multi-cloud replication across AKS, EKS, and GKE.
74
88
75
-
The public docs position the operator across multiple cloud environments and Kubernetes distributions, and the multi-cluster guidance goes further with a documented KubeFleet-based deployment pattern spanning AKS and an on-premises Kubernetes cluster. That is a meaningful direction for teams that want Kubernetes-native control over data placement and replication without committing their operational model to a single environment.
89
+
That is a meaningful capability for teams that want Kubernetes-native control over data placement and replication without locking their operational model to a single cloud provider — especially when combined with the operator's zero licensing cost.
76
90
77
-
Just as importantly, the operator keeps sensitive workflows explicit. Promotion is an intentional operational action, surfaced through Kubernetes resources and the `kubectl documentdb promote` workflow, which is often exactly the right design when changes cross infrastructure or compliance boundaries.
91
+
Promotion across environments is an intentional operational action, surfaced through Kubernetes resources and the `kubectl documentdb promote` workflow. That explicit design is often exactly right when changes cross infrastructure or compliance boundaries.
92
+
93
+
## Modern workloads, not just MongoDB compatibility
94
+
95
+
DocumentDB goes beyond basic MongoDB compatibility. The engine supports **vector search** with up to 4,000-dimensional vectors and half-precision support, making it ready for AI and machine learning workloads. **Change streams** enable real-time monitoring of collection changes for event-driven architectures. And features like advanced aggregation pipelines, geospatial queries, text search, and ACID transactions mean teams can build modern applications without outgrowing the platform.
78
96
79
97
## Why try it now
80
98
81
99
The project is still in preview, and the public docs are clear that it is not yet recommended for production workloads. That is exactly why now is the right time to evaluate it.
82
100
83
-
If you want to see how DocumentDB could fit into your Kubernetes platform, this preview gives you a concrete way to do it: start locally, inspect the control model, test backup and restore, evaluate TLS options, and explore the operator experience before general availability.
101
+
If your team is exploring MongoDB alternatives, looking to reduce database licensing costs, or wants to bring document database management into a Kubernetes-native workflow, this preview gives you a concrete way to do it: start locally, inspect the control model, test backup and restore, evaluate TLS options, and explore the operator experience before general availability.
84
102
85
-
## Start exploring
103
+
Because DocumentDB runs on your existing Kubernetes infrastructure with zero licensing fees, it offers a fundamentally different cost model from managed MongoDB services — while keeping the driver compatibility your applications already depend on.
- **[DocumentDB Kubernetes Operator on GitHub](https://github.com/documentdb/documentdb-kubernetes-operator)** — star the repo, explore the code, file issues
108
+
- **[DocumentDB engine on GitHub](https://github.com/documentdb/documentdb)** — the open-source database engine
109
+
- [Quickstart guide](https://github.com/documentdb/documentdb-kubernetes-operator/blob/main/docs/operator-public-documentation/preview/index.md) — from install to a connected cluster
88
110
- [Backup and restore guide](https://github.com/documentdb/documentdb-kubernetes-operator/blob/main/docs/operator-public-documentation/preview/backup-and-restore.md)
The project is MIT-licensed and welcomes contributions — from bug reports and feature requests to documentation and code. Help shape the future of document databases on Kubernetes.
0 commit comments