The Future of Multi-Tenancy in Kubernetes
Talkat KubeCon + CloudNativeCon North America 2021 · on Wednesday, 2021-10-13· at 15:25· Room 402 AB + Online·
summary
Working group incubates and graduates tools that map to three canonical models — namespaces-as-a-service, multi-cluster (one cluster per tenant), and virtual clusters — and ships a benchmark and conformance tests. Concrete projects include Hierarchical Namespace Controller (used in production at Mercari) and virtual-cluster implementations; sandbox runtimes like gVisor/Kata and node isolation are recommended for hardening the data plane. Remaining work focuses on tenant-aware add‑ons (DNS, ingress, CNI) and usable docs/wizards, not API rewrites.
AI-written summary · about
chapters (6)
- 0:00Working group introduction
- 2:16Multi-tenancy use cases
- 4:05Existing support and patterns
- 8:35Data plane isolation
- 13:37Upstream API considerations
- 18:54Future direction and wrap-up
related talks
24mMulti-Tenancy: Tips, Tricks, Tools And Tests
23mKubernetes Working Group for Multi-Tenancy Project Overview
40mPanel Discussion: Multi-Tenancy in Kubernetes: Current State and Future Roadmap
37mMulti-Tenancy in Kubernetes: Best Practices Today, and Future Directions
35mDeep Dive: Kubernetes Working Group for Multi-tenancy
40mMulti-tenancy in Kubernetes
51mMulti-tenant Kubernetes
05mNamespace Multi-Tenancy, But All The Problems Related To It
