capsule
capsule copied to clipboard
projectcapsule
Multi-tenancy and policy-based framework for Kubernetes.
# Describe the feature I would like to have a generic approach on resources, which are created for each new namespace belonging to a tenant. The same behavior that `.spec.additionalRoleBindings`...
# Describe the feature We would like to have more metrics being exported about the current tenant controlled by an operator. Some Metrics t hat would be helpful: - **Basic...
# Describe the feature There are cases where the cluster admin wants to share secrets with the tenant owners. Such secrets can be used, for example, by tenant owners to...
We are using a specific struct, `AllowedListSpec`: ```go type AllowedListSpec struct { Exact []string `json:"allowed,omitempty"` Regex string `json:"allowedRegex,omitempty"` } ``` to allow tenant users to use only specific IngressClasses, StorageClasses...
# Describe the feature Kubernetes introduced the API Priority and Fairness (APF) feature [beta in k8s 1.20] to control the behaviour of the Kubernetes API server in an overload situation....
# Describe the feature Capsule implements its own set of Admission Controllers through the Dynamic Admission Controller, providing callbacks to add further validation or resource patching. Currently these admission controllers...
# Bug description Tenant Resource Quota admission controller doesn't block resources creation # How to reproduce As cluster admin: ``` cmp~/Shared/capsule$ kubectl get tenants NAME NAMESPACE QUOTA NAMESPACE COUNT OWNER...
A suggestion to have a capsule cli tool would be cool. # Describe the feature create a capsulectl cli tool to view, create, edit, delete tenants
This issue tracks the need to add details about how to use Capsule Proxy, specifically a user guide. The guide could add details about how to communicate over the proxy,...
# Describe the feature The CI pipeline could integrate static security analysis on the (`Cluster`)`Roles` that the operator would run with. # What would the new user story look like?...
Metadata
Owner
Metadata
Multi-tenancy and policy-based framework for Kubernetes.