KubeBlocks
BlogsEnterprise
โŒ˜K
โ€‹
Blogs
Open Source ยท CNCF Graduated ยท Powers Kubernetes

KubeBlocks etcd Operator for Kubernetes

Deploy production-grade etcd clusters in minutes. Raft HA, snapshot backup, horizontal scaling, and full Day-2 operations via a single operator.

Try Playground Free โ†’Read the Docs

< 5s

Leader Election

99.99%

HA Availability

100%

Open Source

Deploy etcd in 4 steps

1

Install KubeBlocks

# Add Helm repo
helm repo add kubeblocks https://apecloud.github.io/helm-charts
helm repo update

# Install KubeBlocks
helm install kubeblocks kubeblocks/kubeblocks \
  --namespace kb-system --create-namespace
2

Install etcd Addon

helm upgrade -i kb-addon-etcd kubeblocks/etcd \
  -n kb-system
3

Create an etcd Cluster

apiVersion: apps.kubeblocks.io/v1
kind: Cluster
metadata:
  name: etcd-cluster
  namespace: demo
spec:
  terminationPolicy: Delete
  clusterDef: etcd
  componentSpecs:
    - name: etcd
      serviceVersion: "3.5.15"
      replicas: 3
4

Cluster is Ready

$ kubectl get cluster etcd-cluster -n demo
NAME           CLUSTER-DEF   STATUS    AGE
etcd-cluster   etcd          Running   2m

Trusted by Engineering Teams at Scale

BONC CloudBONC Cloud
China Mobile CloudChina Mobile Cloud
China Telecom CloudChina Telecom Cloud
TencentTencent
XiaomiXiaomi
Ping AnPing An
VIP.comVIP.com
KwaiKwai
Tiger BrokersTiger Brokers
CITIC SecuritiesCITIC Securities
SealOSSealOS
FastGPTFastGPT
KubeSphereKubeSphere
MomentaMomenta
360360
TilaaTilaa
OlaresOlares
Changan AutomobileChangan Automobile
State GridState Grid
BONC CloudBONC Cloud
China Mobile CloudChina Mobile Cloud
China Telecom CloudChina Telecom Cloud
TencentTencent
XiaomiXiaomi
Ping AnPing An
VIP.comVIP.com
KwaiKwai
Tiger BrokersTiger Brokers
CITIC SecuritiesCITIC Securities
SealOSSealOS
FastGPTFastGPT
KubeSphereKubeSphere
MomentaMomenta
360360
TilaaTilaa
OlaresOlares
Changan AutomobileChangan Automobile
State GridState Grid
Architecture

Raft Consensus. One Operator.

One etcd Raft HA topology โ€” leader, followers, and quorum โ€” operated consistently on Kubernetes.

KubeBlocks runs etcd as one Raft HA architecture on Kubernetes: one leader handles writes, followers replicate the WAL, and a majority of members must acknowledge before a write is committed. Cluster size is configurable for your SLOs; the same operator workflow covers backup, restore, switchover, TLS, and Day-2 ops.

โœ“

Majority quorum โ€” committed writes are replicated to most members before acknowledgment

โœ“

Automatic leader election when the current leader is unavailable

โœ“

Headless service for stable per-pod DNS; optional ClusterIP client service

โœ“

Consistent snapshot backup to object storage (full snapshot, not PITR)

Raft consensus
Majority quorum
Automatic failover
Snapshot backup
Application / Client
Client (if enabled)ย  {cluster}-etcd-client:2379
Defaultย  {cluster}-etcd-headless (pod DNS)
client API โ†’ all pods (etcd routes internally)
Kubernetes Services
{cluster}-etcd-client
ClusterIP ยท :2379 client
all pods (no roleSelector)
disableAutoProvision: true โ€” not created by default
Optional
โ†’ any pod (etcd forwards to leader transparently)
Pods ยท Worker Nodes
etcd-0LEADER
๐Ÿ”‘
etcd
:2379 client + /metrics ยท :2380 peer
leader
๐Ÿ’พ PVC data-0 ยท 10Gi
etcd-1FOLLOWER
๐Ÿ”‘
etcd
:2379 client + /metrics ยท :2380 peer
๐Ÿ’พ PVC data-1 ยท 10Gi
etcd-2FOLLOWER
๐Ÿ”‘
etcd
:2379 client + /metrics ยท :2380 peer
๐Ÿ’พ PVC data-2 ยท 10Gi
โ†”Raft ConsensusWAL replicated to followers ยท quorum acknowledgment required
Leader Node
Follower Node
Persistent Storage
Comparison

How KubeBlocks Compares to Other etcd Options

FeatureKubeBlocksBitnami Helm Chartetcd-operator
Kubernetes-native CRD APIโœ“โœ—โœ“
Raft HA (3 / 5-node)โœ“โœ“โœ“
TLS encryption (peer & client)โœ“โœ“~
Leader switchover (Switchover)โœ“โœ—~
Horizontal scalingโœ“โœ“โœ“
Vertical scaling (CPU/memory)โœ“โœ“โœ—
PVC volume expansionโœ“โœ—โœ—
Parameter reconfigurationโœ“โœ“โœ—
Rolling version upgradeโœ“โœ“โœ—
Snapshot backup & restoreโœ“~~
Prometheus metricsโœ“โœ“โœ“
Stop / start clusterโœ“โœ—โœ—
Open Sourceโœ“โœ“โœ“
Cluster management web UIEnterpriseโœ—โœ—

โœ“ = Supported ยท ~ = Partial / Limited ยท โœ— = Not supported

Enterpriseindicates a capability available in KubeBlocks Enterprise, not the open-source distribution. Contact us for licensing โ†’

etcd-operator column based on hands-on testing of etcd-io/etcd-operator v0.2.0 (Mar 2026) on EKS. Other columns based on official documentation and GitHub issues. Features may vary by version.

Capabilities

Built for Production etcd

KubeBlocks automates the hardest parts of running etcd on Kubernetes โ€” so your team doesn't have to.

๐Ÿ“ธ
Snapshot Backup & Restore
Scheduled snapshot backups via etcdctl to S3-compatible object storage. Restore a full cluster from any stored snapshot.
S3 Storage
Backup Timeline
Snapshot
00:00
Snapshot
+12h
Snapshot
+24h
Restore
target
๐Ÿ“ธ
etcdctl snapshotConsistent DB snapshot
โ†’
โ˜๏ธ
Upload to S3Durable object storage
โ†’
๐Ÿš€
Restore ClusterNew cluster from snapshot
โœ“ Stored Safely
Day-2 Operations

Every Operation Declared as a Kubernetes Resource

No SSH into pods, no shell scripts. Submit an OpsRequest and KubeBlocks handles the rest.

Scaling & Availability

โœ“

Horizontal Scaling

Add or remove etcd members (3 โ†’ 5 or 5 โ†’ 3) online. Raft safely admits new members and redistributes the quorum.

โœ“

Vertical Scaling

Resize CPU and memory on etcd pods with a rolling strategy that keeps quorum available throughout.

โœ“

Volume Expansion

Expand etcd PVCs to increase data directory capacity without pod restarts.

โœ“

Rolling Restart

Controlled pod restarts one at a time โ€” quorum is never lost during the operation.

โœ“

Stop / Start

Suspend clusters to eliminate compute cost during off-hours; resume with full cluster state.

Configuration, Security & Observability

โœ“

Dynamic Configuration

Tune etcd parameters such as heartbeat interval and election timeout via OpsRequest.

โœ“

Version Upgrade

Rolling upgrades from 3.5.x to 3.6.x with health checks. Quorum is maintained at each step.

โœ“

Prometheus Metrics

Built-in Prometheus metrics endpoint at :2379/metrics โ€” plug into Grafana dashboards.

โœ“

Snapshot Backup & Restore

Consistent snapshots via etcdctl to S3-compatible object storage; restore from any stored snapshot.

โœ“

TLS Encryption

Enable mTLS for both client-server (:2379) and peer (:2380) communication with auto-managed certificates via cert-manager.

โœ“

Expose via LoadBalancer

Enable external client access for applications running outside the Kubernetes cluster.

From the Blog

Go Deeper on etcd on Kubernetes

We Let an AI Agent Manage Our Databases. Here's Why Most Operators Failed It.

We Let an AI Agent Manage Our Databases. Here's Why Most Operators Failed It.

We tested AI agents against traditional Kubernetes database operators โ€” and why a unified API like KubeBlocks changes everything.

How to Manage Database Clusters Without a Dedicated Operator?

How to Manage Database Clusters Without a Dedicated Operator?

A unified approach to managing diverse databases on Kubernetes โ€” including infrastructure services like etcd โ€” without the overhead of dedicated operators.

Running Databases on Kubernetes โ€” Insights from Leading Chinese Internet Companies

Running Databases on Kubernetes โ€” Insights from Leading Chinese Internet Companies

Why leading internet companies are increasingly adopting the practice of running stateful databases on Kubernetes.

Get Started

Get Started with KubeBlocks etcd Operator, Risk-Free.

Open source and production-ready. Enterprise customers get dedicated onboarding, migration support, and SLA guarantees.

Try Playground Free โ†’Talk to the Team
โœ“Open Source
โœ“etcd & 35+ other engines
โœ“Production-grade HA
โœ“No vendor lock-in

ยฉ 2026 KUBEBLOCKS INC