News for hackers. Stuff that matters.

A comment on Google Kubernetes Engine is introducing a cluster management fee on June 6. Parent comment

Re:Google Kubernetes Engine is introducing a cluster managem... by zomglings on Wednesday March 04, 2020 @04:12PM (#22488183)
On GKE, you can use a single cluster with multiple node pools to achieve a similar effect. Just set the right affinity on your job resources.
[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Wednesday March 04, 2020 @07:32PM (#22489770)
PTAL at doing Multi-Tenancy in GKE!

https://cloud.google.com/kubernetes-engine/docs/best-practic...

We don't recommend using node pools for isolation.

[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by fluuuhi on Thursday March 05, 2020 @04:13AM (#22492097)
If it is only workload isolation, why not?
[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Thursday March 05, 2020 @11:36AM (#22495098)
For secure isolation, we learned it's not sufficient. It's good for resource isolation though.

PTAL at https://www.youtube.com/watch?v=6rMGRvcjvKc

[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by zomglings on Wednesday March 04, 2020 @07:41PM (#22489819)
That guide looks nice. Have you guys thought about releasing a terraform module or even a cloud composer workflow that will set that up in a project?
[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Wednesday March 04, 2020 @07:56PM (#22489898)
Thanks! We actually do and shipped together with the best practices.

https://github.com/GoogleCloudPlatform/gke-enterprise-mt

Please give us feedback there in case you hit any issue!

[ Parent | on HN ]
Re:Google Kubernetes Engine is introducing a cluster managem... by blazespin on Wednesday March 04, 2020 @06:07PM (#22489142)
Yes, this is the general approach. However it unfortunately has security implications as you are putting MT workloads on a pool with access back to a shared control plane. Dealing with customer uploaded code is a nightmare.
[ Parent | on HN ]