Lightning Talk: Level up from Namespace Isolation with vCluster
recording made private on YouTubehttps://youtu.be/aZwB-ZOZl_s
Lightningat Multi-TenancyCon North America 2023 · on Monday, 2023-11-06· at 16:55· W192ab, McCormick Place·
summary
vCluster creates a virtual Kubernetes API server inside a namespace and stores state in SQLite by default or optionally etcd, Postgres, or MySQL so tenants get a true cluster context while pods are synced and scheduled on the host cluster. Isolated mode (off by default) automatically provisions a Pod Security Standard, a resource quota, a limit range and a network policy and relies on the host CNI for enforcement, giving stronger isolation than namespaces alone.
AI-written summary · about
related talks
34mBeyond Namespaces: Virtual Clusters are the Future of Multi-Tenancy
32mFlexible Kubernetes Multitenancy with vCluster
26mVirtual Kubernetes Cluster
23mVcluster - How we Put a Virtual Kubernetes Cluster Inside Another Kubernetes
37mTenant Autonomy & Isolation In Multi-Tenant Kubernetes Clusters - A Comprehensive Guide
05mPromoting Common Standards Without Sacrificing Tenant Autonomy
35mRunning Isolated VirtualClusters With Kata & Cluster API
23mVirtual Kubernetes Clusters: A New Approach to Multi-tenancy