~/talk

Multi-tenant Kubernetes

on YouTube 51m
Talkat Saint HighLoad++ 2022 · 2022-09-22..09-23· [kubernetes]

speaker

name:Mikhail Sidorov
links:none on file

resources

video:https://youtu.be/RlUK9DkDp2I
slides:none on file

summary

Three practical multitenancy patterns are compared—separate clusters, namespace-based (Capsule), and virtual control planes—along with concrete primitives used: RBAC, ResourceQuota, LimitRange, NetworkPolicy, and Pod security controls. A working virtual-cluster setup uses vcluster (syncer + optional k3s sidecar) to map tenant pods into one host namespace, enabling full API isolation while reusing host nodes; Capsule avoids naive namespace replication by introducing tenant objects. Tradeoffs: clusters cost more, vclusters need plugins for cloud LB and secrets and require an operator to scale.

AI-written summary · about

chapters (7)

  1. 0:00Introduction
  2. 3:38Multi-tenancy terminology
  3. 8:26Resource isolation in Kubernetes
  4. 16:34Native object issues and solutions
  5. 22:20Control plane as a service
  6. 36:11Approach comparison and summary
  7. 39:29Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.