Kcp: Kubernetes-Like Control Plane

https://cloudnativesimplified.substack.com/p/tool-series-1-kcp

by erkanerol • 4 years ago

31 7 4 years ago

cloudnativesimplified.substack.com

withinboredom2• 4 years ago

Reminds me of vclusters

efrecon• 4 years ago

Vcluster runs k3s inside k8s to give access to the full API, but isolated from other virtual clusters.

yjftsjthsd-h• 4 years ago

Right, and that appears to solve about the same problem as "workspaces" in this.

withinboredom2• 4 years ago

Depends on your networking solution. If you’re using something like kilo, connecting the vclusters isn’t that complicated.

atopia• 4 years ago

Cool stuff, a little confused by this quote though:

"The ultimate goal is to be able to use multiple clusters as just compute resources like there is a single big cluster."

- isn't this the point of the underlying K8s nodes?

morelisp• 4 years ago

Layer. Never simplify. Barely abstract. Only layer.

llama052• 4 years ago

I'm always curious of the use cases for something like this.

We manage multiple clusters but it's all done using pipelines so we don't traditionally have issues.

For standard tenants who run standard workloads like Deployments, it is not easy but doable. You need to use RBAC objects, Namespaces, NetworkPolicies, ResourceQuotas, PodSecurityPolicies, etc to limit&isolate the tenants.

Shouldn't you generally use those resources even if you're not on a multi-tenant platform? At a minimum namespaces to segment workloads and other objects to control security.

When it comes to advanced tenants who want to run their own operators with their own CRDs, it is huge pain. Kubernetes has no mechanism to isolate tenants for CRDs. Many people use a separate cluster per tenant in this case.

At this point aren't you just offering a kubernetes hosting solution?

Kcp: Kubernetes-Like Control Plane

Related Stories