Hierarchical Namespace Controller support in EKS

0

does EKS support "Hierarchical Namespace Controller" ? https://github.com/kubernetes-sigs/hierarchical-namespaces

It's in beta in GCP - https://cloud.google.com/anthos-config-management/docs/how-to/installing-hierarchy-controller

Are there recommendations for soft multi-tenancy in a large shared-cluster for an enterprise in EKS ? I looked at this - https://aws.github.io/aws-eks-best-practices/security/docs/multitenancy/ but would prefer using HNC.

Also, what are pros and cons when it comes to using Hierarchical Namespace Controller (HNC) and Virtual Cluster for soft multi-tenancy ? Will I get HA for control-plane in vCluster or it'll become cost prohibitive ?

已提問 1 年前檢視次數 321 次
2 個答案
1

EKS supports many add-ons so long as they don't require modifications to core control-plane pods and etcd. Based on the requirements of HNC (https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/master/docs/user-guide/faq.md), I don't see a reason it would not work. However, be cautious of the word "support", as that answer implies AWS Support will help you with it.

EKS and AWS would not limit the High Availability of HNC. I recommend using a topology constraint to set it up across multiple availability zones. Read here: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/

This is AWS's definitive source of multi-tenancy suggestions for EKS, as you noted: https://aws.github.io/aws-eks-best-practices/security/docs/multitenancy/. If it doesn't mention HNC, then AWS has no stance on it published.

AWS
已回答 10 個月前
1

As Kubernetes is an open-source platform there are several projects and solutions that are created by the community. EKS strives to provide the best experience for our customers running Kubernetes on AWS. Our roadmap is driven by customer input and is published in GitHub[1]. Currently, we do not have any plans to provide hierarchical namespaces (HNC) natively. However, customers may consider exploring custom solutions or third-party controllers to address their immediate needs.

[1] https://github.com/aws/containers-roadmap

Thank you !

AWS
已回答 10 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南