Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo

Hierarchical Namespace Controller support in EKS

0

does EKS support "Hierarchical Namespace Controller" ? https://github.com/kubernetes-sigs/hierarchical-namespaces

It's in beta in GCP - https://cloud.google.com/anthos-config-management/docs/how-to/installing-hierarchy-controller

Are there recommendations for soft multi-tenancy in a large shared-cluster for an enterprise in EKS ? I looked at this - https://aws.github.io/aws-eks-best-practices/security/docs/multitenancy/ but would prefer using HNC.

Also, what are pros and cons when it comes to using Hierarchical Namespace Controller (HNC) and Virtual Cluster for soft multi-tenancy ? Will I get HA for control-plane in vCluster or it'll become cost prohibitive ?

posta un anno fa443 visualizzazioni
2 Risposte
1

EKS supports many add-ons so long as they don't require modifications to core control-plane pods and etcd. Based on the requirements of HNC (https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/master/docs/user-guide/faq.md), I don't see a reason it would not work. However, be cautious of the word "support", as that answer implies AWS Support will help you with it.

EKS and AWS would not limit the High Availability of HNC. I recommend using a topology constraint to set it up across multiple availability zones. Read here: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/

This is AWS's definitive source of multi-tenancy suggestions for EKS, as you noted: https://aws.github.io/aws-eks-best-practices/security/docs/multitenancy/. If it doesn't mention HNC, then AWS has no stance on it published.

AWS
con risposta un anno fa
1

As Kubernetes is an open-source platform there are several projects and solutions that are created by the community. EKS strives to provide the best experience for our customers running Kubernetes on AWS. Our roadmap is driven by customer input and is published in GitHub[1]. Currently, we do not have any plans to provide hierarchical namespaces (HNC) natively. However, customers may consider exploring custom solutions or third-party controllers to address their immediate needs.

[1] https://github.com/aws/containers-roadmap

Thank you !

AWS
con risposta un anno fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande