Explore the challenges and solutions of building a Namespace On-Demand Platform in this 35-minute conference talk by Lukas Gentele from DevSpace Technologies Inc. Dive into the world of multi-tenancy in Kubernetes, focusing on enabling engineers to work in shared clusters and provision namespaces on-demand. Discover key aspects of implementing a Kubernetes-Namespace-as-a-Service offering, including authentication via Dex, automatic RBAC configuration, dynamic admission control using Open Policy Agent, and network isolation with network policies. Learn about resource management techniques, inactivity detection, and automated cleanup of abandoned namespaces. Gain insights into sandboxing and other essential components for creating internal Kubernetes offerings that allow engineering teams to provision namespaces efficiently. Perfect for IT teams looking to enhance their Kubernetes infrastructure and streamline namespace management.
Sharing Clusters - Learnings From Building a Namespace On-Demand Platform