Three Operating Modes

Managed (Nest provisions on-cluster), external (cloud-native AWS/Azure/GCP resources), or imported (register and observe existing resources).

  • Managed: Nest provisions and fully lifecycle-manages the resource on Rook-Ceph, CloudNativePG, Valkey, OpenSearch, and Strimzi. Only mode with Data Protection Policies, DarkDrive-aware scheduling, CSI integration, and Eggs.
  • External: Nest calls cloud-provider APIs directly for create/delete/status; there is no on-cluster provisioning path, so CSI, the injector webhook, and DarkDrive scheduling are not involved.
  • Imported: Nest registers and health-probes a pre-existing resource without provisioning it, with optional managed credential rotation and failover.
  • Tenant isolation, quota, audit logging, RBAC, and health probing are supported consistently across all three modes.
  • Cost tracking is available in managed mode and in external mode (via each cloud provider’s cost APIs); it is unavailable for imported resources, since Nest has no cloud credentials scoped to a resource it did not provision.

← Back to all features

Full technical documentation →