The Shared Service Blueprint: A Guide to Multi-Tenancy, Illustrated With KEDA
Aya Igarashi, Preferred Networks, Inc.
Abstract
What should you consider when providing a service in a multi-tenant Kubernetes environment? How can you maintain strong tenant isolation when the tools weren’t originally designed for it?In this session, we share practical lessons and key considerations from our journey, using the event-driven autoscaler KEDA as a concrete case study. Key topics include:- Architectural trade-offs and secure design principles for multi-tenant components- NetworkPolicy patterns for strict network boundaries- Kubernetes APIService limitations and solutions for multi-tenancy- AuthN/AuthZ mechanisms for a Kubernetes External API ServerBy the end, you’ll gain actionable insights to architect secure, multi-tenant services, along with a deep understanding of crucial Kubernetes extension mechanisms.
