3 ms·
On GKE, you can use a single cluster with multiple node pools to achieve a similar effect. Just set the right affinity on your job resources.
by zomglings 7y ago
On GKE, you can use a single cluster with multiple node pools to achieve a similar effect. Just set the right affinity on your job resources.
- blazespin 7y agoYes, this is the general approach. However it unfortunately has security implications as you are putting MT workloads on a pool with access back to a shared control plane. Dealing with customer uploaded code is a nightmare.
- yoshiat 7y agoPTAL at doing Multi-Tenancy in GKE! https://cloud.google.com/kubernetes-engine/docs/best-practices/enterprise-multitenancy https://cloud.google.com/kubernetes-engine/docs/best-practic... We don't recommend using node pools for isolation.
- fluuuhi 7y agoIf it is only workload isolation, why not?
- yoshiat 7y agoFor secure isolation, we learned it's not sufficient. It's good for resource isolation though. PTAL at https://www.youtube.com/watch?v=6rMGRvcjvKc https://www.youtube.com/watch?v=6rMGRvcjvKc
- zomglings 7y agoThat guide looks nice. Have you guys thought about releasing a terraform module or even a cloud composer workflow that will set that up in a project?
- yoshiat 7y agoThanks! We actually do and shipped together with the best practices. https://github.com/GoogleCloudPlatform/gke-enterprise-mt https://github.com/GoogleCloudPlatform/gke-enterprise-mt Please give us feedback there in case you hit any issue!