KCP KCP Demos, 10 Oct 2022

Previous Meeting

Next Meeting

⏯

youtube image

►

From YouTube: KCP Home Workspaces Demo

Description

Demo of the Home workspaces feature inside KCP

A

Let me showcase the current state of homework spaces on kcp. This is provisional work and just a prototype for now, but gives the main ids. So let's use this new command, which is mainly kcp workspace, go to homeworkspace for user one. We can see that then we are brought in a workspace. In fact that corresponds to several.

A

You know: levels below root, root users, and then you have two levels which are mainly buckets so that you won't have to you know, put every workspace for every user in the same route, but spread among intermediate workspaces, and then you have the main homework space which is user1, but let's try to have a look at the system. Admin here inside this root users workspace, and we can see that um if we try to get the workspaces here that there is inside.

A

In fact there is nothing here so when we did kcpws and went broad to the home. In fact, it's a virtual workspace. In fact, the cluster workspace object has not been created nor assigned to any shard, and nothing has been created. In fact, until the user, one user really tries to do something mainly create a real workspace to work in inside his home, and that's what we're going to try and to do here if we do again kcp workspace create so the typical command.

A

uh Of course. Here we are in the root users um workspace. So that's not going to work. So let's come back to our home and then the home is not it's not created, it's still still virtual and now, if we try to create a test, one workspace to work inside inside the user, one home, then we're going to wait a bit more than usual, because the the client receives retry requests.

A

Just during the time home. Workspace is automatically provisioned. In fact, and then we have been brought directly into the test, one workspace that has been created as well after the user. One has been provisioned, so we can see that we can typically create secrets uh in this new workspace and that secrets cannot be created by an another user as usual because they don't have access.

A

Now, if we come back to the root users uh here as system admin- and we try to get the workspaces, the cluster workspaces that are here, uh we can see that now we have the bei uh home bucket, in fact, the the bucket for all the homework spaces of this. This range that has been created if we go one level down.

A

Here and do the same, then we can see that we have the next bucket and once again.

A

Then we find that we have the user one that has been created automatically, as well as all the required permissions thruster roles and cluster binding to allocating only for now universal workspaces inside the home and now, if we try to um so, let's come back to user one home here and if we try to create, maybe another workspace universal workspace inside the home, but as user 2, we can check that the user, too doesn't have the right to do anything and especially to create workspaces inside the home of user1.

A

That's it thanks for watching.