An Implementation Scheme for k8s Multi tenancy — Introduction to Kubenest

Introduction

What is kubenest

Kubenest is a solution for virtualizing multiple k8s clusters within a k8s cluster. The cluster that is virtualized into multiple k8s clusters is called host-k8s, and the virtualized cluster is called virtualium-k8s, as shown in the following figure:

Why do we need kubenest

In some cases, cloud vendors may provide a large k8s cluster at the underlying level as infrastructure to provide CPU, GPU, and other computing resources to different tenants. In order to achieve the isolation of permissions and data for different tenants, multiple small k8s clusters need to be virtualized in the large k8s cluster for tenants to use. Tenants do not perceive large k8s clusters or the presence of other tenants, and use virtual k8s clusters as if using a normal k8s cluster. Based on this background, we designed kubenest.

Implementation Plan (Solution)

summary

As shown in the above figure, when a tenant accesses a virtual cluster, the first thing they access…