English 中文(简体)
名称空间是否提供了任何孤立和联系
原标题:Does namespaces provide any isolation and relation with the context
  • 时间:2023-08-05 20:22:20
  •  标签:
  • kubernetes

I am new in Kubernetes and I am trying to understand the concept of namespaces and context.
It is basically allows to group resources into logical sets.
An a context is the combination of user/cluster/namespace.
What I am not sure is if namespaces provide any kind of isolation.
E.g. if we have a user A that uses cluster C1 and namespace foo and user B that uses cluster C1 as well and the namespace foo, does any changes that user A does affect user B?
E.g. if user A starts deleting pods would that be also visible by user B?

问题回答

What I am not sure is if namespaces provide any kind of isolation. E.g. if we have a user A that uses cluster C1 and namespace foo and user B that uses cluster C1

名称为集合资源。 为了控制C1类按名称空间进入,它可以通过creating Roles>/code>和向用户发放限制使用特定名称的证书。 这并不意味着用户A 无法通过由B用户在其商业名称空间部署的正像电话启动的网络电话在运行时获得所部署的正文。 对于这一网络孤立,你需要使用<代码>NetworkPolicies

as well and the namespace foo, does any changes that user A does affect user B? E.g. if user A starts deleting pods would that be also visible by user B?

Yes, it is visible. It s just the same cluster two users have access to the same namespace.





相关问题
HTTP call from Celery worker

I am running a Flask-Celery server in docker desktop Kubernetes. It uses a Redis Result Backend. I want to use a Celery Task to make an HTTP call to a program that might take a while. This program ...

Why my website cookies are not being set on my browser?

Hello I am developing a web app, with a microservices architecture. I am using golang (Fiber) on the backend and Next.js on the frontend. When I send a request from restaurant.quiqr.co/signin to api....

我如何终止Kubernetes的名称空间?

我正试图终止Kubernetes的名称空间。 过去,我uc切地遵循了在库韦涅斯这里发现的在终止地位方面摇摇摇欲坠的空地。

helm with if condition and its scope for the value set

I would like to overwrite the user template with .Values.userTemplate if it exist. But I always get $user as undefined when the .Vaues.userTemplate exist. If i remove if condition and use {{- $user := ...

热门标签