# crd

Published articles for crd.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## 【kube-apiserver】CRD / aggregation / 扩展边界：API 扩展停损线

DevFeed: [【kube-apiserver】CRD / aggregation / 扩展边界：API 扩展停损线](<https://devfeed.tech/articles/kube-apiserver-crd-aggregation-api-33969.md>)

Original publisher: [Read original article](<https://quant67.com/post/apiserver/13-extension-boundary/13-extension-boundary.html>)

Author: Liao Tonglang

Published: 2026-08-28T00:00:00Z

Content type: article

Language: zh

Sources: [土法炼钢 - 系统与基础设施](<https://devfeed.tech/sources/source-4.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [API](<https://devfeed.tech/topics/api.md>), [etcd](<https://devfeed.tech/topics/etcd.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [Server](<https://devfeed.tech/topics/server.md>)

Tags: [aggregation](<https://devfeed.tech/tags/aggregation.md>), [api](<https://devfeed.tech/tags/api.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [apiserver](<https://devfeed.tech/tags/apiserver.md>), [apiservice](<https://devfeed.tech/tags/apiservice.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [crd](<https://devfeed.tech/tags/crd.md>), [distributed](<https://devfeed.tech/tags/distributed.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [etcd](<https://devfeed.tech/tags/etcd.md>), [extension](<https://devfeed.tech/tags/extension.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [v1](<https://devfeed.tech/tags/v1.md>), [v1-30-3](<https://devfeed.tech/tags/v1-30-3.md>), [v3-5](<https://devfeed.tech/tags/v3-5.md>), [v3-5-33](<https://devfeed.tech/tags/v3-5-33.md>), [webhook](<https://devfeed.tech/tags/webhook.md>)

### AI overview

This article explains the boundary between Kubernetes CRD and Aggregated API extension paths in kube-apiserver. CRD requests remain within the apiserver and use its storage and admission paths, while Aggregated API requests are proxied to an external Extension Server. The two paths have different failure modes and troubleshooting points, although both can appear as 503 errors or timeouts.

### Source excerpt

厘清 CRD v1 与 Aggregated API 两条扩展路径在 kube-apiserver 中的存储与请求分界：CRD 对象存 etcd、conversion webhook 失败如何体现在 Storage 轴，APIService 则把请求转发到外部 Extension Server 可引发 503。明确 scheduler/controller/kubelet 为扩展停损线之外的数据面与控制循环。