Read Operator (zxporter)

The Read Operator is a lightweight, read-only Kubernetes operator that collects resource utilization metrics from your cluster and exports them to the DevZero platform via gRPC.

It is open-source on GitHub and designed with the principle of least privilege -- it cannot modify any cluster resources.

What It Collects

The operator collects metadata and utilization data across 65+ Kubernetes resource types:

Architecture

zxporter Operator (in-cluster)

  Kubernetes Informers (65+ types)
  - Watch for create/update/delete
  - Delta-based (only changes)
            |
  Collection Manager
  - Configurable frequency
  - Namespace inclusion/exclusion
  - Resource type filtering
            |
  Prometheus Scraper
  - Scrapes cAdvisor, kubelet
  - DCGM GPU metrics
  - Node Exporter metrics
            |
  gRPC Transport (mTLS)
  - Batched export
  - Retry with backoff
  - Compression
            |
   DevZero Control Plane

RBAC

zxporter uses a minimal ClusterRole with read-only access:

• get, list, watch on all collected resource types
• No create, update, patch, or delete permissions
• No access to secrets resources

The operator's ServiceAccount is scoped to its own namespace (devzero-zxporter).

Resource Footprint

The operator adds negligible load to the Kubernetes API server -- it uses informers (watch-based) rather than polling.