Uploaded July 2026 | Updated September 2026, 2 weeks ago
In this episode, CNCF Ambassador Thomas Schuetz explores Capsule for the first time, with CNCF Maintainer Oliver Baehler live on stream to navigate obstacles and elaborate on its design. Capsule is a sandbox project providing multi-tenancy and policy governance for Kubernetes.
For its core capabilities, Capsule features tenant isolation by grouping namespaces into logical tenant environments within a single shared cluster. Its self-service delegation empowers tenant owners to provision resources safely within boundaries without cluster-admin access. For policy governance, it automatically applies resource quotas, network isolation, and RBAC rules across specific tenants. Finally, it supports a native ecosystem, leveraging native Kubernetes custom resources and admission webhooks without adding complex layers.
Join us for this practical, live dive into Capsule!
In this episode, CNCF Ambassador Thomas Schuetz explores Capsule for the first time, with CNCF Maintainer Oliver Baehler live on stream to navigate obstacles and elaborate on its design. Capsule is a sandbox project providing multi-tenancy and policy governance for Kubernetes.
For its core capabilities, Capsule features tenant isolation by grouping namespaces into logical tenant environments within a single shared cluster. Its self-service delegation empowers tenant owners to provision resources safely within boundaries without cluster-admin access. For policy governance, it automatically applies resource quotas, network isolation, and RBAC rules across specific tenants. Finally, it supports a native ecosystem, leveraging native Kubernetes custom resources and admission webhooks without adding complex layers.
Join us for this practical, live dive into Capsule!
