One of the most common use cases for WebAssembly are plug-in systems. We think this approach could be beneficial for many Kubernetes core parts. Thus, we decided to make Admission Controllers the first stop of this evolutionary journey. Kubernetes built-in controllers cannot cover all the scenarios an organization has. Therefore, Dynamic Admission Controllers are offered to have a flexible way to extend the core capabilities. These components run outside of the API Server, with the network sitting in between the source of the events and the code doing the actual evaluation. This increases latency and makes the final outcome less certain because new failure scenarios are introduced. That effectively means Dynamic Admission Controllers are less predictable than their built-in counterparts. This talk will show a prototype that leverages WebAssembly as a way to add custom controllers to the API Server. These components will be as predictable as the built-in ones. Moreover, this approach is useful for edge deployments too because it leads to more lightweight environments. This solution releases computation resources for the end user workloads running on constrained edge locations.
Click here to view captioning/translation in the MeetingPlay platform!
