Video by CNCF [Cloud Native Computing Foundation] via YouTube
In this episode, CNCF Ambassador Thomas Schuetz explores Capsule for the first time, with CNCF Maintainer Oliver Baehler live on stream to navigate obstacles and elaborate on its design. Capsule is a sandbox project providing multi-tenancy and policy governance for Kubernetes.
For its core capabilities, Capsule features tenant isolation by grouping namespaces into logical tenant environments within a single shared cluster. Its self-service delegation empowers tenant owners to provision resources safely within boundaries without cluster-admin access. For policy governance, it automatically applies resource quotas, network isolation, and RBAC rules across specific tenants. Finally, it supports a native ecosystem, leveraging native Kubernetes custom resources and admission webhooks without adding complex layers.
Join us for this practical, live dive into Capsule!