{"repo":"projectcapsule/capsule","free":true,"listed":false,"github":"https://github.com/projectcapsule/capsule","clone":"git clone https://github.com/projectcapsule/capsule.git","description":"Multi-tenancy and policy-based framework for Kubernetes.","language":"Go","stars":2156,"topics":["kubernetes","multi-tenancy","operator","tenant","namespaces","kubernetes-namespaces","multi-tenant-operator","kubernetes-operator"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"--- Join the community on the #capsule channel in the Kubernetes Slack. Kubernetes multi-tenancy made easy Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with the minimalist approach, leveraging only on upstream Kubernetes. What's the problem with the current status? Kubernetes introduces the Namespace object type to create logical partitions of the cluster as isolated slices . However, implementing advanced multi-tenancy scenarios, it soon becomes complicated because of the flat structure of Kubernetes namespaces and the impossibility to share resources among namespaces belonging to the same tenant. To overcome this, cluster admins tend to provision a dedicated cluster for each groups of users, teams, or departments. As an organization grows, the number of clusters to manage and keep aligned becomes an operational nightmare, described as the well known phenomena of the clusters sprawl . Entering Capsule Capsule takes a different approach. In a single cluster, the Capsule Controller aggregates multiple namespaces in a lightweight abstraction called Tenant , basically a grouping of Kubernetes Namespaces. Within each tenant, users are free to create their namespaces and share all the assigned resources. On the other side, the Capsule Policy Engine keeps the different tenants isolated from each other. Network and Security Policies , Resource Quota , Limit Ranges , RBAC , and other poli","default_branch":null,"files":null,"tree":[],"storefront":"/r/projectcapsule","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/projectcapsule/capsule/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}