cocoon-operator manages VM-backed pod lifecycles through two CRDs:
Both reconcilers are built on controller-runtime and consume the typed CRD shapes shipped from cocoon-common/apis/v1.
The binary entry point is main.go; the reconcilers themselves live in subpackages so each one is independently testable:
cocoon-operator/
├── main.go # manager wiring + flag parsing
├── logbridge.go # controller-runtime logr sink over core/log
├── cocoonset/ # CocoonSet reconciler, pod builders, slot release, status diff
├── hibernation/ # CocoonHibernation reconciler
├── metrics/ # Prometheus collectors both reconcilers write to
├── podpatch/ # pod annotation patchers shared by both reconcilers
├── snapshot/ # snapshot.Registry interface consumed by both reconcilers
└── version/ # ldflags-injected build identity
┌──────────────────────────────────────────────────────────────────┐
│ cocoon-operator │
│ │
│ ┌────────────────────────┐ ┌─────────────────────────────┐ │
│ │ cocoonset.Reconciler │ │ hibernation.Reconciler │ │
│ │ - finalizer + GC │ │ - HibernateState patches │ │
│ │ - migration (nodeName) │ │ - registry manifest probe │ │
│ │ - main → subs → tbs │ │ - Conditions │ │
│ │ - /status + Conditions │ │ │ │
│ └────────┬───────────────┘ └────────────┬────────────────┘ │
│ │ │ │
│ ▼ ▼ │
│ ┌────────────────────┐ ┌──────────────────────┐ │
│ │ controller-runtime │ │ snapshot.Registry │ │
│ │ Manager │ │ (OCI via │ │
│ │ - leader election │ │ cocoon-common/oci) │ │
│ │ - metrics :8080 │ └──────────────────────┘ │
│ │ - probes :8081 │ │
│ └────────────────────┘ │
└──────────────────────────────────────────────────────────────────┘
See CocoonSet reconcile loop and CocoonHibernation reconcile loop for the two reconcilers in detail, and Observability for how failures surface as Events and metrics.