Scaling Argo Security and Multi-Tenancy in AWS EKS at the New York Times
Talkat ArgoCon Europe 2023 · on Tuesday, 2023-04-18· at 15:50· Elicium Building | Elicium Ballroom 1 [Argo CD]·
summary
The New York Times builds an internal dev platform using Argo CD on AWS EKS with a single control plane that manages tenant namespaces, adopting one Argo to rule them all while avoiding cluster-admin and CRD installs by doing a separate CRD Helm install and a post-processing step to separate RBAC from install. Target clusters use AWS IAM assumption roles instead of Kubernetes tokens, mapping a limited cluster role (list/watch) plus namespace roles per tenant. Tuning focuses on repo-server parallelism, controller sharding, and API memory to scale; the setup works but still concentrates access in Argo.
AI-written summary · about
chapters (8)
- 0:00Argo security & multi-tenancy
- 4:24Internal developer platform
- 8:57Choosing Argo CD
- 11:24Multi-tenant cluster deployment
- 13:53AWS IAM integration
- 17:44Scaling Argo challenges
- 20:14Lessons learned & future
- 22:44Q&A
related talks
39mDesigning & Securing Multi-Tenant Runtime Environment at the New York Times
28mWhat We Learned Designing & Securing a Multi-Tenant Developer Platform at The New York Times
26mUnlocking the Power of Multi-Tenancy in ArgoCD: A Journey with Expedia..
38mMulti-Tenancy For Argo Workflows And Argo CD At Adobe
24mManaging Argo CD Multi-Tenancy Effectively
21mMulti-Tenant ArgoCD with security and isolation
28mThe ArgoCD AppProject - What Is a Project and How to Power Your...
10mLightning Talk: Creating A Scalable Foundation for Kubernetes Mult...