capsule
capsule copied to clipboard
projectcapsule
Multi-tenancy and policy-based framework for Kubernetes.
# Describe the feature additionalrolebindings section of Tenant specification needs an exact user. It does not support wildcard for user. # What would the new user story look like? Support...
**Request** It's important IMHO to expand and review the current open governance, to be aligned with [CNCF Open governance](https://contribute.cncf.io/maintainers/governance/). **What would the new user story look like?** As a community...
**General** This is an umbrella issue to track the status of all the required points that need to be addressed in the Git repository and GitHub: - [x] Review and...
This is maybe more of a long term vision question/idea. Maybe it's out-of-scope. For better security for tenants, the recommendation is to have user namespace: https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/127-user-namespaces/README.md#motivation That's important for security,...
As part of CNCF Sandbox project onboarding #812, we're moving to a separate neutral GitHub organization. Currently the documentation website is tied to a custom layout published from a private...
Hi, we recently came across a conceptional issue with namespace annotations. In our clusters we are using linkerd as service mesh. To ensure that all tenants are properly meshed, we...
As the CNCF sandbox staging process continues, we should share publicly how the Capsule project governance is led. For reference: https://contribute.cncf.io/maintainers/governance/
Taking inspiration from [KEDA](https://keda.sh/docs/2.11/operate/cluster/), we should share how to operate Capsule on a Kubernetes cluster, as well as sharing the minimum supported version, and required dynamic admission controllers, etc.
# Bug description We are performing a Capsule POC on OpenShift, and it turns out that Capsule misses RBAC configuration to support clusters with [OwnerReferencesPermissionEnforcement admission plugin](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement) enabled. OpenShift enables...
Hi, I am beginner to Capsule framework. Have installed capsule on AWS EKS cluster. Was able to create a tenant with an IAM user with "Describe Cluster" permissions as tenant...
Metadata
Owner
Metadata
Multi-tenancy and policy-based framework for Kubernetes.