Skip to content

Commit 6e5997e

Browse files
authored
Merge pull request #91875 from mburke5678/wmco-remove-hyper-v
WMCO remove Hyper-V statements as it is not supported
2 parents 39adeb8 + 729d6f4 commit 6e5997e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

windows_containers/understanding-windows-container-workloads.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ Multi-tenancy for clusters that have Windows nodes is not supported. Clusters ar
1414
1515
Hostile multi-tenant clusters introduce security concerns in all Kubernetes environments. Additional security features like link:https://kubernetes.io/docs/concepts/policy/pod-security-policy/[pod security policies], or more fine-grained role-based access control (RBAC) for nodes, make exploiting your environment more difficult. However, if you choose to run hostile multi-tenant workloads, a hypervisor is the only security option you should use. The security domain for Kubernetes encompasses the entire cluster, not an individual node. For these types of hostile multi-tenant workloads, you should use physically isolated clusters.
1616
17-
Windows Server Containers provide resource isolation using a shared kernel but are not intended to be used in hostile multitenancy scenarios. Scenarios that involve hostile multitenancy should use Hyper-V Isolated Containers to strongly isolate tenants.
17+
Windows Server Containers provide resource isolation using a shared kernel but are not intended to be used in hostile multitenancy scenarios.
1818
====
1919

2020
[role="_additional-resources"]

0 commit comments

Comments
 (0)