Deep Dive: Kubernetes Working Group for Multi-tenancy
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 17:20· Room 1AB - San Diego Convention Center, Upper Level·
summary
Working Group demonstrates concrete artifacts: a tenant CRD that self-provisions tenant admin namespaces and per-tenant namespaces, a hierarchical namespace controller (HNC) that propagates policies and creates required child namespaces, and a virtual clusters track that gives per-tenant API servers. Demos show Calico global network policies plus PodSecurityPolicy for data-plane isolation, a three-level benchmark proposal (levels 1–3) to quantify isolation, and experimental releases not recommended for prod yet with maturation aimed around six months.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:53Community
- 2:50Multitenancy
- 4:10Tenant operated model
- 11:00Benchmarks
- 14:35Demo
- 21:52Access Controls
- 23:40Assigning namespaces
- 24:37Networking isolation demo
- 25:23Global Network Policy
- 27:08Security Policy
related talks
23mKubernetes Working Group for Multi-Tenancy Project Overview
47mDeep Dive: Kubernetes WG for Multitenancy
38mMulti-Tenancy WG Deep Dive
26mThe Future of Multi-Tenancy in Kubernetes
40mPanel Discussion: Multi-Tenancy in Kubernetes: Current State and Future Roadmap
24mMulti-Tenancy: Tips, Tricks, Tools And Tests
26mIntro + Deep Dive: Kubernetes Policy WG
24mIntro: Kubernetes WG for Multitenancy