How We Run Kubernetes in Kubernetes, aka Kubeception [I]
summary
A “mother” Kubernetes provisions and manages isolated guest clusters via a custom cluster TPR and operators that create pods running KVM on bare metal or call EC2 for AWS; certificates use Vault PKI per-cluster with root CAs, and networking uses one flannel server per host plus per-tenant flannel clients and Calico for policies. The API can create, scale, update and delete clusters on demand, operators automate bootstrapping and teardown, and demos show EC2 instances appearing and being removed automatically.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 0:45Background Motivation
- 2:08Multiple Clusters
- 4:30Main Communities
- 4:54Definition
- 5:32Architecture
- 6:33Application Zone
- 6:48Deployment
- 7:31Ingress
- 8:16Network
- 10:03Certificate Infrastructure
- 10:50Fleet
- 11:46Party Resources
- 14:38Cluster Configuration
- 15:13Certificate Configuration
- 15:26Demo
- 20:33Next Steps
- 22:30Selfhosted clusters
- 22:48Deployments
related talks
35mMulti-Tenancy on Kubernetes with Virtual Clusters
27mElastic cloud bursting with Virtual Kubelet and KIP
26mRunning Kubernetes Clusters the Kubernetes-Native Way
57mThe Kubernetes Sessions Security
40mKubernetes is Your Cloud Control Plane
37mManaging and Running Multiple Kubernetes Clusters in Hybrid Setups
35mKubernetes journey
27mKubernetes The Fun Way