~/panel

Panel: Control Plane vs Data Plane: Untangling the Tenets of Multitenancy

on YouTube 36m
Panelat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 16:25· Room 29ABCD - San Diego Convention Center, Upper Level· [kubernetes]

speakers

name:Erica Von Buelow
links:none on file
name:Sanjeev Rampal
speakerdeck:srampal
name:Ryan Bezdicek
links:none on file
name:Adrian Ludwin
speakerdeck:adrianludwin
name:Fei Guo
links:none on file

resources

video:https://youtu.be/WN8mmHU2HOU
slides:none on file

summary

Discussion compares concrete solutions: an incubating hierarchical namespace controller that propagates policies down namespace trees, an approach assigning each tenant a dedicated API server via virtual clusters, and runtime sandboxes like gVisor, Kata, and Firecracker for stronger data-plane isolation. Production stacks combine PSPs, OPA, network policies, resource quotas and ACM-style GitOps; one deployment protects 40-node clusters with strict quotas and default deny network rules. Benchmarks and standard profiles are proposed to measure and port multi-tenant isolation across clusters.

AI-written summary · about

chapters (7)

  1. 0:00Intro
  2. 0:45Panel Introduction
  3. 3:27Multitenancy Discussion
  4. 9:29Soft Multitenancy
  5. 14:21Bare Metal
  6. 17:38Multitenancy Working Group
  7. 20:19Multitenancy Implementation

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.