News for hackers. Stuff that matters.
Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Wednesday March 04, 2020 @05:31PM (#22488872)
Yes, namespace alone isn't sufficient for isolation. Would you be able to look at our latest Multi-Tenancy best practices?

https://cloud.google.com/kubernetes-engine/docs/best-practic...

It's a living product which comes with Terraform modules. We introduced various features to enable doing Multi-Tenancy as well (and more on their way!)

Re:Google Kubernetes Engine is introducing a cluster managem... by aaronblohowiak on Thursday March 05, 2020 @11:47AM (#22495256)
I’m sorry if i am reading it wrong, but this guide to multi-tenancy seems to suggest not being multi-tennant and instead running a separate cluster per project. This seems more like scaling single-tenancy than multi-tenant (no bin packing oppty for instance.) or did i read it wrong?
Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Thursday March 05, 2020 @12:34PM (#22495827)
Sorry if it was confusing. You need to read into more about how to set up in-cluster multi-tenancy.

We do recommend robust configurations for production setup (e.g. dev, staging and production) however you can certainly squash and skip it if not necessary.

Thanks for the feedback though. We'll consider adding such notes explicitly.

Re:Google Kubernetes Engine is introducing a cluster managem... by aaronblohowiak on Thursday March 05, 2020 @05:12PM (#22498912)
>You need to read into more about how to set up in-cluster multi-tenancy.

I am trying to do that. Where would you suggest? Throughout the comments on this post, when people suggest namespace, pod or node level separation you ask them to PTAL and read the link which suggests the single-tenant cluster-per-project approach (that is under the Multi-tenant cluster, confusingly.) The link you sent talks about cluster-per-project, which is not multi-tenancy as I understand it. Perhaps a different name would be less confusing (robust federated cluster administration?)

Re:Google Kubernetes Engine is introducing a cluster managem... by yoshiat on Thursday March 05, 2020 @07:02PM (#22499771)
"This guide provides best practices to safely and efficiently set up multiple multi-tenant clusters for an enterprise organization."

This "multiple" multi-tenant clusters part isn't coming through. Please do jump into "Securing the cluster" section to cut corners and learn what to do in a single cluster. We're fixing the sections to avoid the confusions. Thanks for the feedback!

https://cloud.google.com/kubernetes-engine/docs/best-practic...