Technology · Ebook

kcp: A Control Plane for Many APIs

by Shriira Press

kcp is a CNCF Sandbox project that takes the part of Kubernetes everyone loves — its declarative API machinery, watch-based reconciliation, RBAC, and CRDs — and frees it from running containers. In its place it offers workspaces: isolated, cluster-like environments created as cheaply as a namespace, arranged in a tree, each with its own APIs and access policies. On top, it adds an export-and-bind model for sharing an API from one workspace into thousands of others. This book covers the multi-tenancy problem kcp solves, its generic control plane, the workspace tree, WorkspaceTypes and initialization, APIResourceSchema, APIExport and APIBinding, identity and permission claims, and the sharding architecture that scales it horizontally.

Contents

1. 1Preface
2. 2Chapter 1 — The Multi-Tenancy Problem
3. 3Chapter 2 — A Control Plane Without Containers
4. 4Chapter 3 — Workspaces and Logical Clusters
5. 5Chapter 4 — WorkspaceTypes and Initialization
6. 6Chapter 5 — Publishing APIs with APIExport
7. 7Chapter 6 — Consuming APIs with APIBinding
8. 8Chapter 7 — Identity, Claims, and Authorization
9. 9Chapter 8 — Sharding and Horizontal Scale
10. 10Chapter 9 — kcp in Practice