Alauda Container Platform

Introduction

TOC

Product Introduction

ACP API Refiner is a data filtering service provided by the Alauda Container Platform that enhances multi-tenant security and data isolation in Kubernetes environments. It filters Kubernetes API response data based on user permissions, projects, clusters, and namespaces, while also supporting field-level filtering, inclusion, and data desensitization.

Limitations

The following limitations apply to ACP API Refiner:

  • Resources must contain specific tenant-related labels for data isolation:

    • cpaas.io/project
    • cpaas.io/cluster
    • cpaas.io/namespace
    • kubernetes.io/metadata.name
    • Optional: cpaas.io/creator

  • LabelSelector queries do not support logical OR operations

  • Platform-level userbindings are not filtered

  • Filtering is only applied to GET and LIST API operations