Story Tag: multitenancy

Stories Tag: multitenancy

Guidewire Cloud: Why Hybrid-Tenancy is the Right Choice (Part 2 of 2) | by Guidewire Engineering Team | Guidewire Engineering...

admin 1 week ago in

By: Anoop Gopalakrishnan (VP Engineering) and Jerome Guionnet (Chief Architect) In Part 1 of this blog, we described the hybrid tenancy model of the Guidewire Cloud Platform (GWCP) and how it maximizes business value for Property & Casualty (P&C) insurers moving to the cloud. In Part 2, we provide further details about the hybrid tenancy architecture and how we are enabling cost efficiencies that further…

Guidewire Cloud: Why Hybrid-Tenancy is the Right Choice | by Guidewire Engineering Team | Guidewire Engineering Blog | Sep, 2021...

admin 3 months ago in

By: Anoop Gopalakrishnan (VP Engineering) and Jerome Guionnet (Chief Architect) Recently Guidewire published a Smart Approach Blog explaining why hybrid tenancy maximizes business value for P&C insurers moving to Guidewire Cloud. In this blog, we explore why the hybrid tenancy approach makes sense from both a business and engineering perspective. Regardless of whether it serves a horizontal or vertical industry, all cloud software companies look…

Looking at the Kubernetes Control Plane for Multi-Tenancy | by Matthias Luft | Aug, 2021 | Salesforce Engineering

admin 3 months ago in

The Salesforce Platform-as-a-Service Security Assurance team is constantly assessing modern compute platforms for security level and features. We use the insights from these research efforts to provide fast and comprehensive support to engineering teams who explore platform options that adequately support their security requirements. Unsurprisingly, Kubernetes is one of the platforms that we deal with on a regular basis. And while Kubernetes multi-tenancy has been…

Enabling Kubernetes Multi-tenancy with Roost | by Sudhirjangir | Jul, 2021 | roost

admin 5 months ago in

Users can share a multi-tenant cluster in a single organization, or your demo users/customers can share it. Kubernetes provides several features to manage multi-tenant clusters, such as Access Control, network policies, resource quota, etc. In addition to this, Roost SaaS Control Plane can provide you control and a simple single-click way to enable multi-tenancy as per your use case. With Roost SaaS Control Plane, you…

Multi-Tenancy Kubernetes Cluster Part 1: 認命吧！有一好，就沒兩好！ | by smalltown | Starbugs Weekly 星巴哥技術專欄 | Apr, 2021 | Medium

admin 7 months ago in

隨著 K8s 各方面功能性越來越齊全，生態系持續壯大之下，很多組織都已經開始使用它來運行重要的應用服務，而把程式部署到 K8s 中相當地簡單，但是當組織內使用的人和部署在叢集內的應用越來越多時，該怎麼管理這些人事物就會開始變成令人苦惱的問題了 ╮（╯＿╰）╭ 尤其當規模大到一個程度時，有一個聲音一定會一直在維護人員的腦中迴盪：究竟該讓不同使用者或是應用服務一起使用一座 K8s Cluster，還是讓單一個使用者獨立使用一座 K8s Cluster? 雖然文章才剛開始，但我可以先說答案，答案就是…這要看情況，有講跟沒講一樣 (被揍飛 讓很多不同使用者一起共享資源的做法，稱為 Multi-Tenancy，其實這個術語從 1960 年開始就有了，有的公司需要使用運算資源時，並不會自己去買伺服器，而是跑去跟持有大型主機的供應商租用一部份運算資源，而因為大家一起分享共用，那麼隔離性就變得很重要了，畢竟住在同一個屋簷下最怕遇到恐怖的室友或是惡鄰居了，底下就讓我們開始來談談 Kubernetes 與 Multi-Tenancy 的相關議題： 這並不是一個簡易的單選題，最大的原因在於 K8s 一開始的架構設計，還有現在這個領域的相關解決方案並不成熟，所以沒有辦法選擇其中一個就解決所有的需求，所以接下來會開始分析原因，還有當前建議的做法 首先讓我們將一些術語定義一下，因為除了 Multi-Tenancy 和 Single-Tenancy 這兩個類別之外，其實 Multi-Tenancy 內還分成軟的跟硬的，也就是所謂的 Soft Multi-Tenancy 和 Hard Multi-Tenancy： Soft Multi-Tenancy 所謂的 Soft Multi-Tenancy 是指不同的使用者或是應用程式間並沒有嚴格的隔離開來，對於受信任和已知的租戶 (Tenant) 來說是一種適宜的解決方案，亦即組戶們都相當地和藹和親，理論上不會去濫用別人的資源，也就是說大家都是好鄰居很有公德心，所以採用 Soft Multi-Tenancy 時的隔離方式，主要是希望避免意外事故的發生，而不是用來防範某個租戶對於其他租戶的惡意攻擊 Hard Multi-Tenancy 而 Hard Multi-Tenancy 則是對不同的使用者或是應用程式間實施嚴格的隔離方式，用來避免某個租戶的惡意行為給其他的租戶們帶來困擾，也就是說遇到沒有公德心且會侵犯其他人的惡鄰居，所以他可以用來當作不信任租戶間的解決方案，例如很多人使用的 AWS 就算是採用 Hard Multi-Tenancy 模式，不同的使用者之間並不會互相影響，不然要是自己儲存的機敏資料跟運行服務會被別人存取或是影響到的話，應該就沒有人敢用 AWS了 再來就是通常在做這個選擇的時候，維運人員最主要考慮的不外乎安全性和可用性這兩個： 安全性 K8s 預設使用 Namespace 和…

Setup Kubernetes Cluster Multi-tenancy with AWS EKS | by Rocky Chen | CodeX | Mar, 2021 | Medium

admin 8 months ago in

A multi-tenant cluster is shared by multiple users and/or workloads which are referred to as “tenants”. The operators of multi-tenant clusters must isolate tenants from each other to minimize the damage that a compromised or malicious tenant can do to the cluster and other tenants. Also, cluster resources must be fairly allocated among tenants. There are many articles discussing multi-tenancy on Kubernetes clusters. Typically, Kubernetes…

Multi tenancy in Kubernetes cluster | by Yogesh Kumar | Feb, 2021 | Medium

admin 9 months ago in

Multi tenancy on k8s cluster can be achieved using Namespace and RBAC approach. A multi-tenant cluster is shared by multiple users and/or workloads which are referred to as “tenants”. The operators of multi-tenant clusters must isolate tenants from each other to minimize the damage that a compromised or malicious tenant can do to the cluster and other tenants. Also, cluster resources must be fairly allocated…

Kubernetes Multi-Tenancy — A Best Practices Guide | by Daniel Thiry | Sep, 2020 | Medium

admin 1 year ago in

A guide on how to tackle typical Kubernetes multi-tenancy challenges by implementing some best practices. Kubernetes multi-tenancy is a topic that more and more organizations are interested in as their Kubernetes usage spreads out. However, since Kubernetes is not a multi-tenant system per se, getting multi-tenancy right comes with some challenges. In this article, I will describe these challenges and how to overcome them as…

Configuring multi-tenant Cloud Pak for Data environment on OpenShift | by Tomasz Hanusiak | Sep, 2020 | Medium

admin 1 year ago in

In some scenarios you need to deploy multiple Cloud Pak for Data instances (for example Prod/Dev environments, HA configuration, separation of different services), in other cases you need to install Cloud Pak for Data next to existing solutions and you want to make sure the products don’t affect each other. Since Cloud Pak for Data deploys in a dedicated namespace there is some initial separation,…

Jaeger’s multitenancy with Elasticsearch | by Moraru Costel | Aug, 2020 | Medium

admin 1 year ago in

I am an Application Architect at IBM, working on building a platform to accelerate continuous delivery with quality, ensuring a modern flexible way to enable DevOps and support an agile culture. For the past year, due to the need of distributed transaction monitoring and root cause analysis in a complex distributed micro-service environment, we introduced Jaeger framework to help us tackle the problem. Since our…