What We Learned Designing & Securing a Multi-Tenant Developer Platform at The New York Times
Talkat Multi-TenancyCon North America 2023 · on Monday, 2023-11-06· at 14:40· W192ab, McCormick Place·
summary
NYT builds a multi-account, multi-tenant developer platform that runs on multi-tenant EKS clusters distributed across regions and uses an operator + CRD GitOps flow to auto-onboard hundreds of teams. Network isolation relies on Cilium network policies, IAM for service accounts is constrained per-tenant to prevent role assumption, ingress uses Envoy and a STO service mesh, CI uses Drone, CD is a single Argo CD control plane, secrets go to Vault, and goal of production on day zero under ten minutes is mostly achieved.
AI-written summary · about
chapters (11)
- 0:00Intro
- 0:20Mission Statement
- 1:08Platform Team
- 1:36Agenda
- 1:59Developer Journey
- 2:41Standardization
- 3:36Workflows
- 4:34Runtime Architecture
- 5:48Centralized Runtime Architecture
- 18:44Continuous Delivery
- 23:55Lessons Learned
related talks
39mDesigning & Securing Multi-Tenant Runtime Environment at the New York Times
28mDesigning and Securing a Multi-Tenant Runtime Environment at the New York Times
24mScaling Argo Security and Multi-Tenancy in AWS EKS at the New York Times
14mKeynote Self Serving Multi Tenant Kubernetes Platform for Enterprise Company
05mLightning Talk: What Makes a Good Multi-tenant Kubernetes Solution?
01h 00mArchitecting multi-tenant PaaS offerings
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
21mDedicated Infrastructure in a Multitenant World