Hard Multi-Tenancy in Kubernetes (opens in new tab)

(blog.jessfraz.com)

41 pointsetxm8y ago3 comments

3 comments

3 comments · 2 top-level

dsnuh8y ago· 1 in thread

Just me or does this read like the proposed solution to move the security boundary from cluster to namespace is to have a cluster per namespace?

Yeah, I don't quite understand it either as it'd be pretty similar to have one process per PID ns at the operating system level.

If you get blocked from the Google doc proposal, strip off the /edit at the end.

j / k navigate · click thread line to collapse