Broker multi-user problem

[zcz-1020]

Does the broker support multiple users， and each user has its own clusterset?

[skitt]

The broker currently only supports one clusterset.

Note that while it would be possible to provide multiple clustersets, the ramifications are complex (especially for gateways) and the MCS API is designed around clusters belonging to a single clusterset.

[zcz-1020]

Thank you for your answer. I still have a question that I have not figured out how to maintain and save the clusters in the clusterset（i.e., which clusters are in the clusterset）. I did not find the corresponding code in the source code, nor did I see the clusterset object.

[tpantelis]

Submariner itself does not have the concept of a clusterset object as you described.

[mkolesnik]

Submariner doesn't deal with "users", it should be possible to deploy two (or more) different brokers on the same cluster (broker is mainly a namespace + CRDs + RBAC) and craft RBAC so that each user can only access their own broker.

As Stephen said it's complex, but possible.

[zcz-1020]

However, I think of a question. Multiple brokers share an ectd backend storage. In this case, will the CRDs watched by the cluster be affected?

[skitt]

Joined clusters watch a single namespace in the broker cluster; if each clusterset has its own namespace, the watched objects will be kept separate.

[zcz-1020]

Joined clusters watch a single namespace in the broker cluster; if each clusterset has its own namespace, the watched objects will be kept separate.

Thank you very much. I understand. Are you advised to create multiple brokers and each broker has its own namespace or one broker has multiple namespaces so that each clusterset corresponds to a namespace?

[skitt]

One broker effectively is a namespace; to create multiple brokers, you create multiple namespaces, and configure the joined clusters to use the appropriate broker namespace.

[zcz-1020]

I understand, thank you very much!