Overview
etcd is a distributed, reliable key-value store designed for the most critical data of a distributed system. It provides consistent coordination, service discovery, and configuration management across distributed systems, making it a common foundation for cluster health and orchestration. This template deploys an etcd cluster as a stateful workload with configurable replica count and persistent storage.What Gets Created
- Stateful Workload — An etcd cluster with a configurable number of replicas (default: 3).
- Volume Set — Persistent storage for etcd data.
- Secret — An opaque startup script secret that handles cluster initialization, peer URL configuration, and replica setup.
- Identity & Policy — An identity bound to the workload with
revealaccess to the startup script secret.
This template does not create a GVC. You must deploy it into an existing GVC.
Installation
This template has no external prerequisites. To install, follow the instructions for your preferred method:UI
Browse, install, and manage templates visually
CLI
Manage templates from your terminal
Terraform
Declare templates in your Terraform configurations
Pulumi
Declare templates in your Pulumi programs
Configuration
The defaultvalues.yaml for this template:
Replicas
replicas— Number of etcd instances in the cluster (minimum 3).
The replica count must always be an odd number. etcd uses the Raft consensus algorithm, which requires a majority quorum — an odd number of members ensures a quorum can always be reached and avoids split-brain scenarios.
Resources
resources.cpu/resources.memory— CPU and memory allocated to each etcd instance (default: 1 CPU, 2Gi). These can be lowered for lighter workloads. See the etcd hardware recommendations for guidance.
Storage
volumeset.capacity— Persistent volume size in GiB for etcd data (minimum 10).
Multi-Zone
multiZone— Whentrue, distributes replicas equally across available zones for higher availability.
Not all locations support multi-zone deployments. Confirm that your target location supports multi-zone before enabling this option.
Internal Access
Theinternal_access section controls which workloads can reach the etcd cluster:
| Type | Description |
|---|---|
same-gvc | Allow access from all workloads in the same GVC |
same-org | Allow access from all workloads in the same organization |
workload-list | Allow access only from specific workloads listed in workloads |