Container technologies have been evolving rapidly in the cloud-native era. Kubernetes, as a production-grade container orchestration platform, has been proven to be successful at managing containerized applications in on-premises datacenters. However, Kubernetes lacks sufficient multi-tenant supports by design, meaning in cloud environments, dedicated clusters are required to serve multiple users, i.e., tenants. This limitation significantly diminishes the benefits of cloud computing, and makes it difficult to build multi-tenant software as a service (SaaS) products using Kubernetes. In this paper, we propose Virtual-Cluster, a new multi-tenant framework that extends Kubernetes with adequate multi-tenant supports. Basically, VirtualCluster provides both control plane and data plane isolations while sharing the underlying compute resources among tenants. The new framework preserves the API compatibility by avoiding modifying the Kubernetes core components. Hence, it can be easily integrated with existing Kubernetes use cases. Our experimental results show that the overheads introduced by VirtualCluster, in terms of latency and throughput, is moderate.
翻译:Kubernetes作为一个生产级集装箱管弦平台,已证明在管理现场的集装箱化应用方面是成功的,然而,Kubernetes在设计上缺乏足够的多租期支持,在云环境中的含义是,需要专门的集群为多个用户(即租户)服务。这一限制大大减少了云计算的好处,并使得难以用Kubernetes建立多租期软件,作为使用Kubernetes的服务(saaS)产品。在本文中,我们提出了“虚拟俱乐部”这一新的多租期框架,以足够的多租期支持扩展Kubernetes。基本上,“虚拟俱乐部”既提供控制平面支持,又提供数据平面隔离,同时在租户之间分享基本的计算资源。新的框架通过避免修改Kubernetes核心组件,保持了API的兼容性。因此,它很容易与现有的Kubernetes使用案例结合起来。我们的实验结果表明,虚拟俱乐部在胶和透面方面引入的顶部是中度的。