Kubernetes Namespaces Unleashed: Unlocking the Full Potential of You...
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2023 · on Thursday, 2023-09-28· at 14:45· 3层 301明珠厅| 3F The Pearl Hall 301·
summary
A cross‑cloud, multi‑tenant Kubernetes platform runs over ~300 clusters and hosts 2.1M containers (≈1M pods, ~2,000 GPUs) using tooling like Cilium, Envoy, Kata Containers, Open Policy Agent and a custom controller K-Shredder park-node upgrade to perform mostly non‑disruptive worker upgrades. Capacity is handled by automatic resource configuration (ARC) and a Baseline Quota Unit quota multiplier; governance uses OPA Gatekeeper policies. Continuous delivery scales with an “Argo of Argos” multi‑tier Argo CD pattern.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:09Five-year Kubernetes journey
- 2:33Ethos Kubernetes platform
- 4:44Multi-tenancy with namespaces
- 6:28Multi-tenancy with policies
- 8:22Capacity management
- 11:58Governance policies
- 13:44OPA Gatekeeper
- 16:54Policy enforcement challenges
- 17:35Non-disruptive upgrades
- 22:27Multi-tenancy at scale
- 24:55Key takeaways
- 26:30Q&A: Park Nodes
- 29:01Q&A: Quotas and responsibilities
- 30:13Q&A: Upgrades and control plane
- 31:25Closing
related talks
05mLightning Talk: What Makes a Good Multi-tenant Kubernetes Solution?
05mNamespace Multi-Tenancy, But All The Problems Related To It
35mSharing is Caring: Your Kubernetes Cluster, Namespaces, and You
33mKubernetes at Cruise: Two Years of Multitenancy
37mTenant Autonomy & Isolation In Multi-Tenant Kubernetes Clusters - A Comprehensive Guide
29mK8s Complexity Tamed: One Interface To Rule Them All With CNCF Incubat...
37mKubernetes Security and How to Fix K8s Cluster at Scale
29mManaging a Multi-Tenanted Kubernetes Cluster in Production