The new namespace will contain specifications for the capabilities of a new process assigned under its domain. When creating a new Kubernetes namespace, a request is sent using the namespace API using the defined syscalls, and since Kubernetes has admin privileges, a new namespace will be created. The API will enable programs to interact with the namespaces in a stable and scalable way.

When creating a new Linux namespace, a namespace API allows for the creation, deletion, and modification of any namespaces. time_for_children -> time:Įach process contains the details for what system capabilities and child processes it is allowed. The Linux documentation has an example output of what can be found in a processes /proc//ns directory: $ ls -l /proc/$$/ns | awk '' The symbolic link will define the process capabilities during runtime with each process will contain defined capabilities of all eight classes. There are currently eight types of supported Linux kernel namespaces:ĭuring each process initialization, a symbolic link in the /proc//ns directory is created. The feature works by having a single namespace for a set of resources and processes, each referring to different resources. Namespaces allow the kernel to assign group attributes to a single or multiple processes. The qualifications for these two example processes should be different. Some processes will require the ability to view and edit network capabilities others will require filesystem access.

This separation is useful when evaluating the different resources that are available to the kernel. Namespaces partition kernel resources so that defined processes can view and interact with a limited set of resources. Namespaces are a feature of the Linux kernel.

What makes Kubernetes Namespace different?.

So how did the idea grow to be used in the robust fashion it is used today? This blog will review However, namespaces are not a new concept in fact, Linux namespaces were introduced in 2002 and designed to separate and group individual processes and capabilities. Kubernetes namespaces are a central part of how we structure, deploy, and manage containers today.

What is kubernetes namespace