Multi Tenancy Roadmap

Roadmap

This section lists a brief overview of the release theme of each milestone, and the key features delivered by the milestone.

The details of each milestone and the execution status are listed in the next section.

Milestone	Theme & Key Features
130	Initial features (tenant object & tenant space)
330	Cluster Virtualization & Access Control
430	Multi-tenancy controllers and CRD isolation
530	Multi-tenancy networking & Multi-tenancy controllers
630	Multi-tenancy networking
Post 630	P2 Features (tenant-level rate limiting, cross-tenant access, etc)

Details

Milestone 01/30/2020

Resource Management

• New API object "tenant" in system space
• TenantName in ObjectMeta type.
• Key path of the resources in etcd with tenant
• Self-links with tenant info included
• Tenant resource url resolution and access control
• Client-go changes to support tenancy

Controllers

• Tenancy-aware scheduler
• Tenancy-aware replicaSet controller
• Tenancy-aware deployment controller

Runtime

• Support Kata to provide OS kernel isolation

Milestone 03/30/2020

Resource Management

• Short path for tenant space resources in endpoint handler
• Tenancy-aware certificate authenticator
• Tenancy-aware token authenticator
• Tenancy-aware RBAC authorizer
• Tenant context in kube-config
• Tenancy-level API resource discovery

Controllers

• Add tenant controller

Milestone 04/30/2020

Resource Management

• CRD Isolation among tenants

Controllers

• Tenancy-aware job controller
• Tenancy-aware volume (pv/pvc) controller
• Tenancy-aware scheduler & kubelet for volume control

Network

• New API object "network"

Milestone 05/30/2020

Resource Management

• Multi-tenancy CRD resource discovery
• Default tenant role binding
• Support tenant.All

Controllers

• Tenancy-aware statefulSet controller
• Tenancy-aware daemonset controller
• Tenancy-aware service controller
• Tenancy-aware cronjob controller

Network

• Endpoints design proposal
• Tenant controller to bootstrap default network

Milestone 06/30/2020

• Stabilization Improvement

Resource Management

• Check tenant existence during request processing
• Tenant controller: tenant deletion
• Tenancy-aware resource quota controller
• "--tenant" command-line option in Kubectl
• Refactoring: Set objectMeta.tenant for all objects (not urgent)

Network

• Flat network operator deployment
• Mizar network provider can be deployed
• service IP will be managed by Arktos or network provider
• Per-network service for "Kubernetes" and "KubeDNS"
• Flat network: multi-tenancy kube-proxy
• Per-network DNS pod auto deployment

07/30/2020

• Define the expected behavior: node (virtual node?), daemonSet, Local PV/PV provionsioner for tenant users, system CRDs(like rook) in tenant spaces
• Tenant-level Resource quota
• Cross-tenant access
• Remaining controllers for multi-tenancy
• Tenant-level rate limiting
• Tenant-level usage metrics/statistics
• Flat network: policy-based network isolation