KubeCon + CloudNativeCon Europe

Three Shades of Isolation: A Multi-tenancy Fortress - Braulio Dumba & Paolo Dettori, IBM

34:21 · 23 Mar 2026 – 26 Mar 2026 · YouTube

About this talk

This talk covers the architectural concept of multi-tenancy in cloud native environments, specifically within Kubernetes. The speakers, Braulio Dumba and Paolo Dettori from IBM, present a novel approach to enhancing tenant isolation through three shades of isolation: data-plane, control-plane, and network, utilizing open-source technologies such as K3s, KubeFlex/KubeStellar, KubeVirt, and UDN/OVN-k8s. They explore the main requirements for effective multi-tenancy in Kubernetes, examine popular models along with their challenges, and demonstrate how their framework can simplify management for cluster administrators. The session includes practical case studies on isolating workloads, specifically focusing on the llm-d and vLLM production stack.