Technology · Ebook

Capsule: Kubernetes Multi-Tenancy

by Shriira Press

A practical, in-depth guide to Capsule, the Kubernetes multi-tenancy operator. Learn how Capsule lets many teams safely share one cluster: the Kubernetes multi-tenancy problem (namespaces are not tenants), the operator and webhook architecture, the Tenant model and namespace self-service, tenant-level resource quotas, policy enforcement (network, registries, node selectors), automatic RBAC and Capsule Proxy, security and isolation (soft multi-tenancy and hardening), and operating Capsule at scale.

Contents

1. 1Preface
2. 2Chapter 1 — What Capsule Is
3. 3Chapter 2 — The Kubernetes Multi-Tenancy Problem
4. 4Chapter 3 — Architecture
5. 5Chapter 4 — Tenants and Namespace Self-Service
6. 6Chapter 5 — Resource Quotas and Limits
7. 7Chapter 6 — Policy Enforcement
8. 8Chapter 7 — RBAC and Capsule Proxy
9. 9Chapter 8 — Security and Isolation
10. 10Chapter 9 — Operations and Observability
11. 11Chapter 10 — Capsule in Practice