Capsule

  • About Capsule
  • Documentation
  • No results for .
  • Github
    • Overview
    • Dev guide
    • Contributing
  • Capsule Operator
    • Getting Started
    • Use Cases
    • Monitoring Capsule
    • References
      • Overview
      • AWS EKS
      • SIG Multi-tenancy benchmark
      • Block access to cluster resources
      • Block access to multitenant resources
      • Block access to other tenant resources
      • Block add capabilities
      • Require always imagePullPolicy
      • Require run as non-root user
      • Block privileged containers
      • Block privilege escalation
      • Configure namespace resource quotas
      • Block modification of resource quotas
      • Configure namespace object limits
      • Block use of host path volumes
      • Block use of host networking and ports
      • Block use of host PID
      • Block use of host IPC
      • Block use of NodePort services
      • Require PersistentVolumeClaim for storage
      • Require PV reclaim policy of delete
      • Block use of existing PVs
      • Block network access across tenant namespaces
      • Allow self-service management of Network Policies
      • Allow self-service management of Roles
      • Allow self-service management of Role Bindings
      • Onboard Tenants
      • Create Namespaces
      • Assign Permissions
      • Enforce Resources Quotas and Limits
      • Enforce Pod Priority Classes
      • Assign specific Node Pools
      • Assign Ingress Classes
      • Assign Ingress Hostnames
      • Control hostname collision in Ingresses
      • Assign Storage Classes
      • Assign Network Policies
      • Enforce Containers image PullPolicy
      • Assign Trusted Images Registries
      • Assign Pod Security Policies
      • Create Custom Resources
      • Taint Namespaces
      • Assign multiple Tenants
      • Cordon Tenants
      • Disable Service Types
      • Taint Services
      • Allow adding labels and annotations on namespaces
      • Velero Backup Restoration
      • Deny Wildcard Hostnames
  • Capsule Proxy
    • Overview
    • Standalone Installation
    • Sidecar Installation
    • OIDC Authentication
    • Contributing
  • Capsule Lens extension
    • Overview

Kubernetes Operator

  • Getting Started
  • Use Cases
  • SIG Multi-tenancy benchmark
  • Run on Managed Kubernetes Services
  • Monitoring Capsule
  • References

  • Contributing

Capsule

©2021 All rights reserved
  • About Capsule
  • Documentation
  • Github
  • Twitter
  • Linkedin