From Tenant Isolation to Microsegmentation: Securing VMs With Kube-OVN in SUSE Virtualization
SUSE, Friday, October 16th, 2026
SUSE shows how Kube-OVN in SUSE Virtualization delivers tenant isolation and VM microsegmentation via Kubernetes CRDs.
As enterprises consolidate VM workloads onto SUSE Virtualization clusters, SUSE argues they need both tenant isolation and microsegmentation, since each alone leaves gaps.
SUSE Virtualization uses Kube-OVN to deliver both natively through Kubernetes CRDs: Vpc and Subnet resources for isolation, and NetworkPolicy plus Kube-OVN SubnetACL for microsegmentation.
Each tenant gets its own routing domain on shared infrastructure, while microsegmentation prevents a compromised VM from becoming a foothold.