~/talk

The Future of Multi-Tenancy in Kubernetes

Talkat KubeCon + CloudNativeCon North America 2021 · on Wednesday, 2021-10-13· at 15:25· Room 402 AB + Online· [kubernetes]
linkedin:tashy
speakerdeck:adrianludwin
name:Fei Guo
links:none on file
slides:none on file

Working group incubates and graduates tools that map to three canonical models — namespaces-as-a-service, multi-cluster (one cluster per tenant), and virtual clusters — and ships a benchmark and conformance tests. Concrete projects include Hierarchical Namespace Controller (used in production at Mercari) and virtual-cluster implementations; sandbox runtimes like gVisor/Kata and node isolation are recommended for hardening the data plane. Remaining work focuses on tenant-aware add‑ons (DNS, ingress, CNI) and usable docs/wizards, not API rewrites.

AI-written summary · about

  1. 0:00Working group introduction
  2. 2:16Multi-tenancy use cases
  3. 4:05Existing support and patterns
  4. 8:35Data plane isolation
  5. 13:37Upstream API considerations
  6. 18:54Future direction and wrap-up
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.