Event Details

Multi-tenancy support for Kubernetes has been an active topic in Kubernetes over the last few years.  This forum will brainstorm on a Keystone-based authentication/authorization solution for Kubernetes that can be used to support multi-tenancy in Kubernetes.  The forum will first briefly discuss options for what multi-tenancy actually means in Kubernetes; e.g. API object access, namespaces, network access, resource quotas, etc. .  Then the forum will discuss use of kubernetes authentication/authorization webhooks to a Token Server with a Keystone backend to enable basic Keystone authentication and authorization of the Kubernetes API.  And finally, discuss / brainstorm on additional mechanisms required to meet the previously discussed Kubernetes Multi-Tenancy Requirements.  Ideally would be looking to collaborate on this forum with KEYSTONE project.