Multi-Tenancy Support & Security Modeling with RBAC and Namespaces
summary
Shows how Kubernetes namespaces plus RBAC implement two concrete models: an exclusive cluster where users can create namespaces and cluster admins retain full control, and a shared cluster where tenants are restricted to specific namespaces. Demonstrates a working product with an OpenStack auth plugin, live RBAC grants/denials, and namespace creation flows. Notes limitations: username lowercasing bug and no per-user delegated namespace creation in this release.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 4:17The Problem
- 7:33Namespaces
- 13:14Authentication
- 21:47Demo
- 22:52Creating Exclusive Cluster
- 29:34Creating Namespaces
related talks
16mKubernetes Multi-Cluster and Multi-Tenancy With RBAC and KubeFed
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
35mDeep Dive: Kubernetes Working Group for Multi-tenancy
05mNamespace Multi-Tenancy, But All The Problems Related To It
37mMulti-Tenancy in Kubernetes: Best Practices Today, and Future Directions
35mSharing is Caring: Your Kubernetes Cluster, Namespaces, and You
33mHow the Basics Of Kubernetes Auth Scale For Organizations
31mKubernetes RBAC Security: A Practical Overview