> ## Documentation Index
> Fetch the complete documentation index at: https://ngrok.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Operator

> Learn about the ngrok Kubernetes Operator for providing secure ingress to your k8s applications.

The ngrok Kubernetes Operator exposes your Kubernetes services securely using standard Kubernetes resources like Ingress or the Gateway API.
With the Operator, teams can create and manage ngrok endpoints for their apps using a shared ngrok account.

Optionally, bindings let you make services running elsewhere (including your local machine or another cluster) appear inside a cluster as normal Kubernetes Services.
This enables private, cross-cluster connectivity without publishing publicly accessible URLs.

## Concepts

<Columns cols={1}>
  <Card title="How it works" href="/k8s/how-it-works/" horizontal>
    Learn how the Operator establishes secure connections and routes traffic.
  </Card>

  <Card title="Architecture" href="/k8s/installation/architecture/" horizontal>
    Understand the Operator's control loops and design.
  </Card>

  <Card title="Load Balancing" href="/k8s/load-balancing/load-balancing-kubernetes/" horizontal>
    Distribute traffic across multiple Kubernetes services.
  </Card>
</Columns>

## Features

* [Local cluster options](/k8s/guides/local-cluster/) - Set up a local Kubernetes cluster for development and testing.
* [Helm configuration](/k8s/installation/helm/) - Reference for Helm config values when installing the Operator.
* [Observability](/k8s/installation/observability/) - Monitor and observe your Operator deployment.

## Use cases

<Columns cols={2}>
  <Card title="Secure endpoints with OAuth" icon="user" href="/k8s/guides/how-to/oauth/">
    Configure OAuth authentication in Kubernetes to secure your endpoints by requiring valid OAuth tokens before forwarding requests.
  </Card>

  <Card title="Route traffic to backends" icon="route" href="/k8s/guides/how-to/request-routing/">
    Configure request routing to direct incoming traffic to the appropriate backend services based on rules.
  </Card>

  <Card title="Handle TLS traffic" icon="lock" href="/k8s/guides/how-to/tls-routing/">
    Configure TLS routing in Kubernetes to handle encrypted traffic using SNI-based routing with optional TLS termination.
  </Card>

  <Card title="Protect services with rate limiting" icon="shield-check" href="/k8s/guides/how-to/rate-limiting/">
    Configure rate limiting in Kubernetes to protect your services from excessive traffic and ensure fair usage across clients.
  </Card>
</Columns>

## What's next?

* Get started with [Ingress](/getting-started/kubernetes/ingress/), [Gateway API](/getting-started/kubernetes/gateway-api/), [Custom Resources](/getting-started/kubernetes/crds/), or [Endpoints](/getting-started/kubernetes/endpoints/).
* Explore the [guides](/k8s/guides/using-crds/) for common use cases and configurations.