Deploy production-grade etcd clusters in minutes. Raft HA, snapshot backup, horizontal scaling, and full Day-2 operations via a single operator.
Leader Election
HA Availability
Open Source
Deploy etcd in 4 steps
Install KubeBlocks
# Add Helm repo helm repo add kubeblocks https://apecloud.github.io/helm-charts helm repo update # Install KubeBlocks helm install kubeblocks kubeblocks/kubeblocks \ --namespace kb-system --create-namespace
Install etcd Addon
helm upgrade -i kb-addon-etcd kubeblocks/etcd \ -n kb-system
Create an etcd Cluster
apiVersion: apps.kubeblocks.io/v1
kind: Cluster
metadata:
name: etcd-cluster
namespace: demo
spec:
terminationPolicy: Delete
clusterDef: etcd
componentSpecs:
- name: etcd
serviceVersion: "3.5.15"
replicas: 3Cluster is Ready
$ kubectl get cluster etcd-cluster -n demo NAME CLUSTER-DEF STATUS AGE etcd-cluster etcd Running 2m
Trusted by Engineering Teams at Scale
One etcd Raft HA topology โ leader, followers, and quorum โ operated consistently on Kubernetes.
KubeBlocks runs etcd as one Raft HA architecture on Kubernetes: one leader handles writes, followers replicate the WAL, and a majority of members must acknowledge before a write is committed. Cluster size is configurable for your SLOs; the same operator workflow covers backup, restore, switchover, TLS, and Day-2 ops.
Majority quorum โ committed writes are replicated to most members before acknowledgment
Automatic leader election when the current leader is unavailable
Headless service for stable per-pod DNS; optional ClusterIP client service
Consistent snapshot backup to object storage (full snapshot, not PITR)
{cluster}-etcd-client:2379{cluster}-etcd-headless (pod DNS)| Feature | KubeBlocks | Bitnami Helm Chart | etcd-operator |
|---|---|---|---|
| Kubernetes-native CRD API | โ | โ | โ |
| Raft HA (3 / 5-node) | โ | โ | โ |
| TLS encryption (peer & client) | โ | โ | ~ |
| Leader switchover (Switchover) | โ | โ | ~ |
| Horizontal scaling | โ | โ | โ |
| Vertical scaling (CPU/memory) | โ | โ | โ |
| PVC volume expansion | โ | โ | โ |
| Parameter reconfiguration | โ | โ | โ |
| Rolling version upgrade | โ | โ | โ |
| Snapshot backup & restore | โ | ~ | ~ |
| Prometheus metrics | โ | โ | โ |
| Stop / start cluster | โ | โ | โ |
| Open Source | โ | โ | โ |
| Cluster management web UI | Enterprise | โ | โ |
โ = Supported ยท ~ = Partial / Limited ยท โ = Not supported
Enterpriseindicates a capability available in KubeBlocks Enterprise, not the open-source distribution. Contact us for licensing โ
etcd-operator column based on hands-on testing of etcd-io/etcd-operator v0.2.0 (Mar 2026) on EKS. Other columns based on official documentation and GitHub issues. Features may vary by version.
KubeBlocks automates the hardest parts of running etcd on Kubernetes โ so your team doesn't have to.
No SSH into pods, no shell scripts. Submit an OpsRequest and KubeBlocks handles the rest.
Scaling & Availability
Horizontal Scaling
Add or remove etcd members (3 โ 5 or 5 โ 3) online. Raft safely admits new members and redistributes the quorum.
Vertical Scaling
Resize CPU and memory on etcd pods with a rolling strategy that keeps quorum available throughout.
Volume Expansion
Expand etcd PVCs to increase data directory capacity without pod restarts.
Rolling Restart
Controlled pod restarts one at a time โ quorum is never lost during the operation.
Stop / Start
Suspend clusters to eliminate compute cost during off-hours; resume with full cluster state.
Configuration, Security & Observability
Dynamic Configuration
Tune etcd parameters such as heartbeat interval and election timeout via OpsRequest.
Version Upgrade
Rolling upgrades from 3.5.x to 3.6.x with health checks. Quorum is maintained at each step.
Prometheus Metrics
Built-in Prometheus metrics endpoint at :2379/metrics โ plug into Grafana dashboards.
Snapshot Backup & Restore
Consistent snapshots via etcdctl to S3-compatible object storage; restore from any stored snapshot.
TLS Encryption
Enable mTLS for both client-server (:2379) and peer (:2380) communication with auto-managed certificates via cert-manager.
Expose via LoadBalancer
Enable external client access for applications running outside the Kubernetes cluster.
Open source and production-ready. Enterprise customers get dedicated onboarding, migration support, and SLA guarantees.