# Kubernetes Operator for API and AI Traffic
Unify Kubernetes services and gateway management with the Kong Kubernetes Operator.
## 100% deployment flexibility
- - Run the Kong Kubernetes Operator where you please. Leverage stand-alone Kong deployments, Kong Ingress, or Konnect hybrid data planes.
- - Seamlessly manage traffic with the CNCF-backed Gateway API in Hybrid Mode, making it easier to migrate from Ingress without disruption.
## Automatic certificate rotation
- - Mitigate certificate-related downtime with automated expiration monitoring and rotation.
- - Deep CertManager integration allows you to use any issuer available in your cluster (e.g. ACM, GCM, LetsEncrypt).
## Advanced autoscaling
- - Have the option to autoscale your workloads based on response latency, not just CPU usage.
- - Autoscale Kong Gateways up or down based on CPU and memory consumption, then shut them down automatically when they’re no longer needed.
## Kubernetes native metrics
- - Filter and aggregate by Kubernetes resources—no translation needed.
- - Use the Konnect Debugger to capture traces and logs directly from Kubernetes for faster troubleshooting and reduced mean time to resolution.
## Managed Gateways & Service Catalog
- - Define Gateway API resources, and let the Kong Kubernetes Operator handle deployment and configuration. Let your developers focus on generating business value.
- - Kubernetes Gateway services are automatically cataloged in Konnect, reducing manual effort and making APIs instantly discoverable for governance and consumption.
## Integrated Developer Portal
- - Once cataloged, services can flow directly into the Konnect Developer Portal, where developers can securely discover and consume them.
- - Enable true self-service access to Kubernetes-hosted APIs across your organization.
## AI Gateway
- - Deploy and use an AI Gateway in under 60 seconds on Kubernetes.
- - Leverage no-code AI plugins to enforce data privacy, security, and guardrails for AI-driven workloads.
## A hands-off approach to Kubernetes
Deploy, configure and monitor API ingress and gateways on Kubernetes with the Kong Kubernetes Operator. Work with vendor-neutral Gateway API resources and let the Kubernetes Operator handle the rest.
Customize as much as you need with `PodTemplateSpec` and `HorizontalPodAutoscaler` policy support, or keep the defaults and things will just work.
## Resources
## Kong Operator FAQs
Questions platform teams ask before automating Kong on Kubernetes
What is a Kubernetes operator, and what does Kong’s operator do?
A Kubernetes operator automates the management of applications and services through Kubernetes resources. The Kong Kubernetes Operator deploys, configures, and monitors API ingress and gateways on Kubernetes, helping your team reduce manual management.
Which deployment options does the Kong Kubernetes Operator support?
The Kong Operator supports stand-alone Kong deployments, Kong Ingress, and Kong Konnect hybrid data planes. This flexibility lets you choose the deployment approach that fits your environment.
Does the Kong Kubernetes Operator support Gateway API?
Yes, the Kong Kubernetes Operator works with vendor-neutral Gateway API resources to handle gateway deployment and configuration. It also supports Gateway API in Hybrid Mode, helping you migrate from Ingress without disrupting traffic.
How does the Kong Kubernetes Operator help manage certificates?
The operator automates certificate expiration monitoring and rotation to help reduce certificate-related downtime. Its integration with cert-manager lets you use any certificate issuer available in your cluster.
Can the Kong Kubernetes Operator automatically scale gateways and workloads?
Yes, the operator supports scaling Kong Gateways up or down based on CPU and memory consumption, with automatic shutdown when they’re no longer needed. You also have the option to scale workloads based on response latency rather than CPU usage alone.
How does the Kong Kubernetes Operator support monitoring and troubleshooting?
Kubernetes-native metrics let you filter and aggregate data by Kubernetes resources without translating between systems. You can also use the Konnect Debugger to capture traces and logs directly from Kubernetes, helping your team troubleshoot faster.
How does the Kong Kubernetes Operator make Kubernetes-hosted APIs easier to discover?
Kubernetes Gateway services are automatically cataloged in Konnect, reducing manual effort and making APIs discoverable for governance and consumption. Once cataloged, services can flow into the Konnect Developer Portal, where developers can securely discover and consume them through self-service access.
Can I use the Kong Kubernetes Operator for AI traffic?
Yes, the Kong Kubernetes Operator supports deploying and using an AI Gateway on Kubernetes in under 60 seconds. No-code AI plugins let you enforce data privacy, security, and guardrails for AI-driven workloads.
Can I customize deployments managed by the Kong Kubernetes Operator?
Yes, the operator supports deployment customization through `PodTemplateSpec` and `HorizontalPodAutoscaler` policies. You can tailor these settings to your needs or use the defaults for a more hands-off approach.