Download
Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with a minimalist approach, leveraging only on upstream Kubernetes. Kubernetes introduces the Namespace object type to create logical partitions of the cluster as isolated slices. However, implementing advanced multi-tenancy scenarios, it soon becomes complicated because of the flat structure of Kubernetes namespaces and the impossibility to share resources among namespaces belonging to the same tenant. To overcome this, cluster admins tend to provision a dedicated cluster for each groups of users, teams, or departments. As an organization grows, the number of clusters to manage and keep aligned becomes an operational nightmare, described as the well known phenomena of the clusters sprawl.
Features
- Leave developers the freedom to self-provision their cluster resources according to the assigned boundaries
- Share a single cluster with multiple teams, groups of users, or departments by saving operational and management efforts
- Leverage Kubernetes Admission Controllers to enforce the industry security best practices and meet policy requirements
- Take control of the resources consumed by users while preventing them to overtake
- Provide multi-tenancy with a native Kubernetes experience without introducing additional management layers, plugins, or customized binaries
- Capsule is completely declarative and GitOps ready
Project Samples
