Kubernetes operator that manages VM-backed pod lifecycles through two CRDs: CocoonSet (declarative agent groups) and CocoonHibernation (per-pod hibernate / wake requests).

Both reconcilers are built on controller-runtime and consume the typed CRD shapes shipped from cocoon-common/apis/v1.

Documentation: cocoonstack.github.io/cocoon-operator (source in docs/).

cocoon-operator/
├── main.go              # manager wiring + flag parsing
├── cocoonset/           # CocoonSet reconciler, pod builders, slot release, status diff
├── hibernation/         # CocoonHibernation reconciler
├── metrics/             # Prometheus collectors both reconcilers write to
└── snapshot/            # snapshot.Registry interface consumed by both reconcilers

kubectl apply -k github.com/cocoonstack/cocoon-operator/config/default?ref=main
kubectl -n cocoon-system set env deploy/cocoon-operator \
  OCI_REGISTRY=REGION-docker.pkg.dev/PROJECT/REPO

Full steps, including the ADC-less sa-key overlay, in Installation.

• Architecture — component diagram, package layout
• CocoonSet reconcile loop — finalizer/GC, lifecycle-bridge stamp, failed-state and suspend short-circuits, seat-release hibernation, placement (node pool + snapshot CPU class), cross-node migration, agent + toolbox reconciliation
• CocoonHibernation reconcile loop — Hibernate/Wake desire handling, finalizer, recoverable failure phases
• Observability — K8s Events and Prometheus metrics
• Configuration — every environment variable
• Installation — kustomize install, ADC vs SA-key auth, keeping CRDs in sync with cocoon-common

make all            # full pipeline: deps + fmt + lint + test + build
make build          # build cocoon-operator binary
make test           # vet + race-detected tests
make lint           # golangci-lint on linux + darwin
make import-crds    # refresh config/crd/bases from cocoon-common
make help           # show all targets

The Makefile detects Go workspace mode (go env GOWORK) and skips go mod tidy when active so cross-module references resolve through go.work without forcing a release of cocoon-common.

MIT