Skip to content

Commit eb70e6a

Browse files
committed
feat: add resources
Signed-off-by: Oliver Bähler <[email protected]>
1 parent 2611da1 commit eb70e6a

File tree

5 files changed

+38
-2
lines changed

5 files changed

+38
-2
lines changed

content/en/docs/tenants/enforcement.md

+16
Original file line numberDiff line numberDiff line change
@@ -1338,6 +1338,22 @@ solar Cordoned 4 2d11h
13381338
silver Active 2 3d13h
13391339
```
13401340

1341+
### Force Tenant-Prefix
1342+
1343+
Use this if you want to disable/enable the Tenant name prefix to specific Tenants, overriding global forceTenantPrefix in [CapsuleConfiguration](/docs/reference/#capsuleconfigurationspec). When set to 'true', it enforces Namespaces created for this Tenant to be named with the Tenant name prefix, separated by a dash (i.e. for Tenant 'foo', namespace names must be prefixed with 'foo-'), this is useful to avoid Namespace name collision. When set to 'false', it allows Namespaces created for this Tenant to be named anything. Overrides CapsuleConfiguration global forceTenantPrefix for the Tenant only. If unset, Tenant uses CapsuleConfiguration's forceTenantPrefix
1344+
1345+
```yaml
1346+
apiVersion: capsule.clastix.io/v1beta2
1347+
kind: Tenant
1348+
metadata:
1349+
name: solar
1350+
spec:
1351+
owners:
1352+
- name: alice
1353+
kind: User
1354+
forceTenantPrefix: true
1355+
```
1356+
13411357
### Deletion Protection
13421358

13431359
Sometimes it is important to protect business critical tenants from accidental deletion. This can be achieved by toggling preventDeletion specification key on the tenant:

content/en/docs/tenants/permissions.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -380,7 +380,7 @@ EOF
380380

381381
### Proxy Owner Authorization
382382

383-
> This feature will be deprecated in a future release of Capsule. Instead use [ProxySettings](/docs/integrations/addons/capsule-proxy#proxysettings)
383+
> This feature will be deprecated in a future release of Capsule. Instead use [ProxySettings](docs/proxy/proxysettings/)
384384

385385

386386
When you are using the [Capsule Proxy](/docs/integrations/addons/capsule-proxy), the tenant owner can list the cluster-scoped resources. You can control the permissions to cluster scoped resources by defining `proxySettings` for a tenant owner.

data/addons.yaml

+11
Original file line numberDiff line numberDiff line change
@@ -39,3 +39,14 @@ addons:
3939
#layoutColor: "#FFFFFF"
4040
#descriptionColor: "#FFEBEE"
4141

42+
- name: "Cortex Proxy"
43+
logo: "https://github.com/projectcapsule/cortex-proxy/raw/main/docs/images/logo.png"
44+
tags:
45+
- "core"
46+
- "observability"
47+
links:
48+
- link: "https://github.com/projectcapsule/cortex-proxy"
49+
icon: "fab fa-github"
50+
description: "Route metrics to cortex organizations based on the relational of namespace metrics to capsule tenants."
51+
52+

data/resources.yaml

+10-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,14 @@
11
resources:
2+
- title: "The State of Multi-tenancy in Kubernetes by LoftLabs"
3+
url: https://www.linkedin.com/events/7297698298100936704/comments/
4+
date: "2025-02-27"
5+
thumbnail: "/images/content/multi-tenant-spectrum.png"
6+
type: "video"
7+
- title: "Kubernetes Multi-tenancy Spectrum by aniele Polencic"
8+
url: https://www.linkedin.com/posts/danielepolencic_multi-tenancy-spectrum-in-kubernetes-ugcPost-7299773103826423809-logM?utm_source=share&utm_medium=member_desktop&rcm=ACoAACmXYUUB8FmX69ABG0zyNMP4W0AhGgWpgNU
9+
date: "2025-02-10"
10+
thumbnail: "/images/content/multi-tenant-spectrum.png"
11+
type: "article"
212
- title: "Painless Multi-Tenant Kafka on Kubernetes with Istio at ASML - Thomas Reichel & Dominique Chanet"
313
youtube: "qMkV5qeOnfg"
414
date: "2024-10-07"
@@ -11,7 +21,6 @@ resources:
1121
date: "2023-12-13"
1222
youtube: "m5TAb6UWlwA"
1323
type: "video"
14-
1524
- title: "How TomTom achieves Kubernetes multi-tenancy with Capsule"
1625
date: "2023-10-13"
1726
url: "https://engineering.tomtom.com/capsule-kubernetes-multitenancy/"
Loading

0 commit comments

Comments
 (0)