Multi Tenancy Roadmap

Roadmap

This section lists a brief overview of the release theme of each milestone, and the key features delivered by the milestone.

The details of each milestone and the execution status are listed in the next section.

Milestone	Theme & Key Features
130	Initial features (tenant object & tenant space)
330	Cluster Virtualization & Access Control
430	Multi-tenancy controllers and CRD isolation
530	Multi-tenancy networking & Multi-tenancy controllers
630	Multi-tenancy networking
Post 630	P2 Features (tenant-level rate limiting, cross-tenant access, etc)

Details

Milestone 01/30/2020

Resource Management

• New API object "tenant" in system space
• TenantName in ObjectMeta type.
• Key path of the resources in etcd with tenant
• Self-links with tenant info included
• Tenant resource url resolution and access control
• Client-go changes to support tenancy

Controllers

• Tenancy-aware scheduler
• Tenancy-aware replicaSet controller
• Tenancy-aware deployment controller

Runtime

• Support Kata to provide OS kernel isolation

Milestone 03/30/2020

Resource Management

• Short path for tenant space resources in endpoint handler
• Tenancy-aware certificate authenticator
• Tenancy-aware token authenticator
• Tenancy-aware RBAC authorizer
• Tenant context in kube-config
• Tenancy-level API resource discovery

Controllers

• Add tenant controller

Milestone 04/30/2020

Resource Management

• CRD Isolation among tenants

Controllers

• Tenancy-aware job controller
• Tenancy-aware volume (pv/pvc) controller
• Tenancy-aware scheduler & kubelet for volume control

Network

• New API object "network"

Milestone 05/30/2020

Resource Management

• Multi-tenancy CRD resource discovery
• Default tenant role binding
• Support tenant.All

Controllers

• Tenancy-aware statefulSet controller
• Tenancy-aware daemonset controller
• Remaining controllers for multi-tenancy: service, resource quota

Network

• Endpoints design proposal
• Tenant controller to bootstrap default network
• Flat network controller(per-network service/DNS)
• Flat network: policy-based network isolation
• Flat network operator deployment

Milestone 06/30/2020

• Stabilization Improvement

Resource Management

• Tenant-level Resource quota
• Admission controller to block certain tenant resources: node, daemonSet

Network

• Service/endpoints controller
• Kubernetes service & its endpoints
• DNS service & deployment
• Flat network: kube-proxy adaption

Post 06/30/2020

• Tenant-level rate limiting
• Tenant-level usage metrics/statistics
• Cross-tenant access