Avesha KubeSlice Partner Validated

OpenShift provides infrastructure orchestration and automation for k8s clusters in the
datacenter and in AWS [ROSA], Azure [ARO] and other public clouds, where-as

KubeSlice complements OpenShift to provide for multi-cluster and multi-tenant
application orchestration and automation for Enterprises and Telcos. OpenShift +
KubeSlice partnership is used in Telcos’ to orchestrate a multi-tenant E2E network
slice.

KubeSlice provides API/CLI to simplify and automate the placement of multi-tenant
workloads onto shared infrastructure of one or more k8s clusters. This allows for
definition, deployment and change management of the application workloads to be
managed in a E2E DevOps CI/CD pipeline and to be done in minutes.

Each instance of a KubeSlice creates a dedicated interconnected network fabric for a
tenant to host their applications, on shared infrastructure of one or more clusters
deployed in a datacenter or cloud. This fabric is made of dedicated encrypted vpn
tunnels that facilitate communications for services deployed across clusters for this

tenant. This tunnel accommodates all protocols of network traffic [Layer3-Layer7]
including http.

KubeSlice improves the security posture of multi-tenant or single tenant application
deployments in multiple ways.
KubeSlice creates dedicated secure vpn tunnels with auto certificate rotation to
enable cluster to cluster direct communication, avoiding north-south traffic that
requires services to be exposed to the public internet. This reduces the attack surface
for malicious actors.
KubeSlice automates definition and enforcement of network policy and RBAC across
clusters. This reduces policy drift and reduces the probability of errors and policy drift
to be significantly reduced.
In the instance of a hack, the blast radius is limited to the slice.