Amazon Eks Multitenancy with Loft vCluster

What is Loft vCluster?

vCluster is a Kubernetes-native solution that allows you to create fully functional virtual Kubernetes clusters inside regular Kubernetes namespaces. Each virtual cluster has its own API server, control plane, and data store, providing strong isolation and multi-tenancy on top of a shared underlying Kubernetes cluster.

---

Reference Architecture

---

Deploy Solution

Deploy cluster with CSI, CNI components

• Navigate to path

cd <path>/aws-eks-loft-vcluster/hostcluster/

• Edit environmentVariables.sh with relevent values

export AWS_REGION="us-east-2"  # edit as needed
export ACCOUNT_ID="$(aws sts get-caller-identity --query Account --output text)"

#Cluster Variables
export CLUSTER_NAME="vcluster-demo" # edit as needed
export KUBERNETES_VERSION="1.28" # edit as needed

export VPC_CNI_ROLE="AmazonEKSVPCCNIRole" # edit as needed
export VPC_CNI_VERSION="v1.18.2-eksbuild.1" # edit as needed

• Run scritp _main.sh

sh ./hostcluster/_main.sh 

Deploy vCluster, Application & test network isolation

Follow the guide to deploy : link

• vCluster
• deploy api application
• deploy network isolation between vClsuter
• Test network isolation