vCluster Shared Nodes architecture

vCluster Shared Nodes architecture An architecture diagram generated by Archify. Developer A · kubectl · Architecture component Developer A kubectl Developer B · kubectl · Architecture component Developer B kubectl Host API server · EKS control plane · Host cluster / tenant boundary Host API server EKS control plane Host etcd · Host metadata · Host cluster / tenant boundary Host etcd Host metadata Virtual API server · Reviewed Kubernetes distro · Host cluster / tenant boundary › Host cluster / tenant boundary Virtual API server Reviewed Kubernetes distro Syncer · Resource synchronization · Host cluster / tenant boundary › Host cluster / tenant boundary Syncer Resource synchronization Tenant data store · Embedded database / etcd · Host cluster / tenant boundary › Host cluster / tenant boundary Tenant data store Embedded database / etcd Syncer · Resource synchronization · Host cluster / tenant boundary › Host cluster / tenant boundary Syncer Resource synchronization Virtual API server · Reviewed Kubernetes distro · Host cluster / tenant boundary › Host cluster / tenant boundary Virtual API server Reviewed Kubernetes distro Tenant data store · Embedded database / etcd · Host cluster / tenant boundary › Host cluster / tenant boundary Tenant data store Embedded database / etcd Host nodes and workload Pods · Shared kernel / CNI / CSI · Host cluster / tenant boundary Host nodes and workload Pods Shared kernel / CNI / CSI kubeconfig kubeconfig sync sync create Pod create Pod Host cluster / tenant boundary Host cluster / tenant boundary Host cluster / tenant boundary

Isolation boundaries

  • • Separate APIs/RBAC do not imply node/network isolation
  • • Shared Nodes shares kernels, CNI and CSI
  • • Private Nodes and Standalone are separate modes