10 ms·

As also a security person (:wave:), you can use dedicated node pools and workload identity to isolate workloads in the same cluster.

• lvh 7y ago
  Workload identity is a GCP-specific beta feature for mapping to GCP IAM, right?
  • bluhbi 7y ago
    yes
  • yoshiat 7y ago
    Yes and it's going GA. https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-engine-features-and-guidance-to-help-lock-down-your-containers https://cloud.google.com/blog/products/containers-kubernetes... https://cloud.google.com/kubernetes-engine/docs/best-practices/enterprise-multitenancy https://cloud.google.com/kubernetes-engine/docs/best-practic...