Project Lightning Talk: Capsule: Launching Multi-Tenancy to New Kubernetes Horizons

on YouTube ↗05m

" summary

Project Capsule provides multi-tenancy by adding a tenant CRD and an operator that reconciles RBAC, ResourceQuotas, LimitRanges, NetworkPolicies and replicated secrets so teams get self-service namespaces without cluster sprawl. It ships a capsule-proxy ACL proxy in front of the API server, integrates with Flux and Argo CD, and enforces pod and namespace limits at runtime. Adopted in production by a US DoD agency, TomTom and ASML, it reduces clusters from many to a few while admitting prior CVEs in the proxy that are now being fixed.

AI-written summary · about

" related talks

• 30mMulti-Tenancy in Kubernetes: How We Avoided Clusters Sprawl W...Dario Tranchitella, Maksim Fedotov · KubeCon + CloudNativeCon Europe 2021
• 05mNamespace Multi-Tenancy, But All The Problems Related To ItHristo Hristov · KubeCon + CloudNativeCon Europe 2026
• 51mMulti-tenant KubernetesMikhail Sidorov · Saint HighLoad++ 2022
• 05mLightning Talk: What Makes a Good Multi-tenant Kubernetes Solution?Victor Varza · KubeCon + CloudNativeCon North America 2019
• 40mPanel Discussion: Multi-Tenancy in Kubernetes: Current State and Future RoadmapTasha Drew, Ryan Bezdicek, Sanjeev Rampal, Erica Von Buelow · KubeCon + CloudNativeCon Europe 2019
• 37mMulti-Tenancy in Kubernetes: Best Practices Today, and Future DirectionsDavid Oppenheimer · KubeCon + CloudNativeCon Europe 2018
• 29mManaging a Multi-Tenanted Kubernetes Cluster in ProductionJosh Bowen · KubeCon + CloudNativeCon North America 2016
• 01h 00mArchitecting multi-tenant PaaS offeringsJudah Bernstein, Ranjith Raman · AWS re:Invent 2019 Global Partner Summit