The operator pattern and custom resources allows me to extend the kubernetes API to cover certificates, backups, encrypted secrets, and more in a consistent centralised way.

I preferred to start with an empty cluster and to add in the functionality needed.