Lightning Talk: What Makes a Good Multi-tenant Kubernetes Solution?
Lightningat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 17:02· Exhibit Hall AB - San Diego Convention Center, Ground Level·
summary
Kubernetes primitives alone are insufficient for production multi-tenancy, so Adobe builds a cross‑cloud platform that automates tenant onboarding (namespace, roleBinding, resourceQuota, limitRange, networkPolicy and cluster selection), runs in production since December after migrating from Mesos, and supports hundreds of teams at scale. Networking uses Cilium (BPF, L7 policies for HTTP/gRPC), ingress uses Heptio Contour (Envoy, hot restart, metrics, advanced LB), policy enforcement uses Open Policy Agent, and Kata Containers provide VM‑grade sandboxing.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:06Ethos Kubernetes Friends
- 1:30Ethos Kubernetes Onboarder
- 1:57Cilium
- 2:29Contour
- 3:05OpenPolicyAgent
- 3:31Kata Containers
- 4:07Observability
related talks
26mMulti-Tenant vs Micro-Clusters in Kubernetes-Driven Platform Engineering
40mPanel Discussion: Multi-Tenancy in Kubernetes: Current State and Future Roadmap
37mMulti-Tenancy in Kubernetes: Best Practices Today, and Future Directions
05mLightning Talk - Realizing the Multi-Cloud Promise of Kubernetes
21mDedicated Infrastructure in a Multitenant World
32mKubernetes Namespaces Unleashed: Unlocking the Full Potential of You...
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
39mLessons Learned Migrating an Existing Product to a Multi Tenant Cloud Native Environment