@@ -59,7 +59,7 @@ toil as the organization grows.
59
59
# Introducing hierarchical namespaces
60
60
61
61
[ Hierarchical
62
- namespaces] ( https://github.com/kubernetes-sigs/multi-tenancy /blob/master/incubator/hnc/ docs/user-guide/concepts.md#basic )
62
+ namespaces] ( https://github.com/kubernetes-sigs/hierarchical-namespaces /blob/master/docs/user-guide/concepts.md#basic-concepts )
63
63
are a new concept developed by the [ Kubernetes Working Group for Multi-Tenancy
64
64
(wg-multitenancy)] ( https://github.com/kubernetes-sigs/multi-tenancy ) in order to
65
65
solve these problems. In its simplest form, a hierarchical namespace is a
@@ -71,10 +71,10 @@ This concept of ownership enables two additional types of behaviours:
71
71
72
72
* ** Policy inheritance:** if one namespace is a child of another, policy objects
73
73
such as RBAC RoleBindings are [ copied from the parent to the
74
- child] ( https://github.com/kubernetes-sigs/multi-tenancy /blob/master/incubator/hnc/ docs/user-guide/concepts.md#basic -propagation ) .
74
+ child] ( https://github.com/kubernetes-sigs/hierarchical-namespaces /blob/master/docs/user-guide/concepts.md#policy-inheritance-and-object -propagation ) .
75
75
* ** Delegated creation:** you usually need cluster-level privileges to create a
76
76
namespace, but hierarchical namespaces adds an alternative:
77
- [ _ subnamespaces_ ] ( https://github.com/kubernetes-sigs/multi-tenancy /blob/master/incubator/hnc/ docs/user-guide/concepts.md#basic-subns ) ,
77
+ [ _ subnamespaces_ ] ( https://github.com/kubernetes-sigs/hierarchical-namespaces /blob/master/docs/user-guide/concepts.md#subnamespaces-and-full-namespaces ) ,
78
78
which can be manipulated using only limited permissions in the parent
79
79
namespace.
80
80
@@ -88,7 +88,7 @@ without violating the policies that were imposed by the cluster administrators.
88
88
89
89
Hierarchical namespaces are provided by a Kubernetes extension known as the
90
90
[ ** Hierarchical Namespace
91
- Controller** ] ( https://github.com/kubernetes-sigs/multi-tenancy/tree/master/incubator/ hnc ) ,
91
+ Controller** ] ( https://github.com/kubernetes-sigs/hierarchical-namespaces#the-hierarchical-namespace-controller- hnc ) ,
92
92
or ** HNC** . The HNC consists of two components:
93
93
94
94
* The ** manager** runs on your cluster, manages subnamespaces, propagates policy
@@ -97,7 +97,7 @@ or **HNC**. The HNC consists of two components:
97
97
interact with the manager.
98
98
99
99
Both can be easily installed from the [ releases page of our
100
- repo] ( https://github.com/kubernetes-sigs/multi-tenancy /releases ) .
100
+ repo] ( https://github.com/kubernetes-sigs/hierarchical-namespaces /releases ) .
101
101
102
102
Let’s see HNC in action. Imagine that I do not have namespace creation
103
103
privileges, but I can view the namespace ` team-a ` and create subnamespaces
@@ -161,7 +161,7 @@ _also_ allow ingress traffic between all of those namespaces. The “tree” lab
161
161
can only be applied by HNC, and is guaranteed to reflect the latest hierarchy.
162
162
163
163
You can learn all about the features of HNC from the [user
164
- guide](https://github.com/kubernetes-sigs/multi-tenancy /tree/master/incubator/hnc /docs/user-guide).
164
+ guide](https://github.com/kubernetes-sigs/hierarchical-namespaces /tree/master/docs/user-guide).
165
165
166
166
# Next steps and getting involved
167
167
@@ -178,7 +178,7 @@ or help prototype new features such as exceptions, improved monitoring,
178
178
hierarchical resource quotas or fine-grained configuration.
179
179
180
180
Please get in touch with us via our
181
- [repo](https://github.com/kubernetes-sigs/multi-tenancy ), [mailing
181
+ [repo](https://github.com/kubernetes-sigs/hierarchical-namespaces ), [mailing
182
182
list](https://groups.google.com/g/kubernetes-wg-multitenancy) or on
183
183
[Slack](https://kubernetes.slack.com/messages/wg-multitenancy) - we look forward
184
184
to hearing from you!
0 commit comments