Managing a Multi-Tenanted Kubernetes Cluster in Production
Kubernetes clusters dedicated to a single organization are becoming common, either run by the organizations that use them or hosted by others. Less common is a multi-tenant use of a single cluster. T …
Talk Title | Managing a Multi-Tenanted Kubernetes Cluster in Production |
Speakers | Josh Bowen (Apigee), Noah Dietz (Software Developer, Apigee), Martin Nally, Jeremy Whitlock (Apigee) |
Conference | KubeCon + CloudNativeCon North America |
Conf Tag | |
Location | Seattle, WA, United States |
Date | Nov 7- 9, 2016 |
URL | Talk Page |
Slides | |
Video | Talk Video |
Kubernetes clusters dedicated to a single organization are becoming common, either run by the organizations that use them or hosted by others. Less common is a multi-tenant use of a single cluster. There are problems to be solved in managing a multi-tenanted Kubernetes cluster in production. At Apigee, we are building a new Kubernetes-based platform that hosts applications for our clients and ourselves on a single, shared cluster. This talk will cover: - Securely routing traffic to the correct tenant - Isolating tenant network environments - Authenticating and authorizing management API calls using our own and our customers' identity providers and access control policies - Creating a multi-tenanted build and deploy flow