Exploring how to extend Rancher project network isolation to build a secure multi-tenant Kubernetes cluster

Here we explore the idea of creating a multi-tenant Kubernetes cluster using Rancher, Rancher projects and project network isolation.We’ll investigate some security and usage concerns.This might of interest for you if you like to create a multi-tenant Kubernetes cluster or if you just like to gain more knowledge about Kubernetes security in general.

Question

Can we create one (large) Kubernetes cluster and share this between different users, maybe even different organizations? When we do this we want some level of isolation between the users. If the users will be from different departments in the same company isolation could be less strict than if these coming from different companies.

TL;DR

It’s possible but requires a lot of effort. Maybe better to maintain multiple Kubernetes clusters depending on the use case.

#kubernetes #devops