Orchestrating Multi-Tenancy Kubernetes Environments with Flux
Talkat Multi-TenancyCon North America 2023 · on Monday, 2023-11-06· at 14:05· W192ab, McCormick Place·
summary
Flux is used as a GitOps control plane for Kubernetes that actually boots clusters with a single bootstrap command, reconciles via Source/Customize/Helm controllers, and updates Git when images change via the image automation controller. The talk shows a working soft multi tenancy pattern used at State Farm where tenants are created with flux create tenant, controllers impersonate tenant service accounts, and platform admins enforce isolation with flags such as D-no-cross-namespaces-refs=true so tenants cannot affect each other.
AI-written summary · about
chapters (11)
- 0:00Introduction to Flux and GiOps
- 3:53GitOps for security & productivity
- 4:55What Flux is and how it works
- 7:24Flux architecture & features
- 12:21Multi-tenancy in Kubernetes
- 13:05Flux RBAC & tenant isolation
- 14:29Admin and tenant roles
- 16:41Benefits of Flux multi-tenancy
- 18:04Secure Flux bootstrapping
- 20:32Demo: tenant onboarding
- 25:54Resources & next steps
related talks
26mFlux: Multi-tenancy Deep Dive
47mOne Repo to Rule Them All: Kubernetes Cluster Tenancy with Flux v2
39mEnhance Your Kubernetes Experience with GitOps & Flux
39mCreating A Landlord for Multi-tenant K8s Using Flux, Gatekeeper, Helm, and Friends
01h 01mManaging Kubernetes the GitOps way with Flux
15mPlatform Engineering Done Right: Safe, Secure, & Scalable Multi-Tenant GitOps
27mLightning Talk: GitOps, A Slightly Realistic Situation on Kubernetes with Flux
42mIntro: Flux