Stories Tag: multitenancy

Multi-Tenancy Kubernetes Cluster Part 1: 認命吧！有一好，就沒兩好！ | by smalltown | Starbugs Weekly 星巴哥技術專欄 | Apr, 2021 | Medium

admin 2 months ago in

隨著 K8s 各方面功能性越來越齊全，生態系持續壯大之下，很多組織都已經開始使用它來運行重要的應用服務，而把程式部署到 K8s 中相當地簡單，但是當組織內使用的人和部署在叢集內的應用越來越多時，該怎麼管理這些人事物就會開始變成令人苦惱的問題了 ╮（╯＿╰）╭ 尤其當規模大到一個程度時，有一個聲音一定會一直在維護人員的腦中迴盪：究竟該讓不同使用者或是應用服務一起使用一座 K8s Cluster，還是讓單一個使用者獨立使用一座 K8s Cluster? 雖然文章才剛開始，但我可以先說答案，答案就是…這要看情況，有講跟沒講一樣 (被揍飛 讓很多不同使用者一起共享資源的做法，稱為 Multi-Tenancy，其實這個術語從 1960 年開始就有了，有的公司需要使用運算資源時，並不會自己去買伺服器，而是跑去跟持有大型主機的供應商租用一部份運算資源，而因為大家一起分享共用，那麼隔離性就變得很重要了，畢竟住在同一個屋簷下最怕遇到恐怖的室友或是惡鄰居了，底下就讓我們開始來談談 Kubernetes 與 Multi-Tenancy 的相關議題： 這並不是一個簡易的單選題，最大的原因在於 K8s 一開始的架構設計，還有現在這個領域的相關解決方案並不成熟，所以沒有辦法選擇其中一個就解決所有的需求，所以接下來會開始分析原因，還有當前建議的做法 首先讓我們將一些術語定義一下，因為除了 Multi-Tenancy 和 Single-Tenancy 這兩個類別之外，其實 Multi-Tenancy 內還分成軟的跟硬的，也就是所謂的 Soft Multi-Tenancy 和 Hard Multi-Tenancy： Soft Multi-Tenancy 所謂的 Soft Multi-Tenancy 是指不同的使用者或是應用程式間並沒有嚴格的隔離開來，對於受信任和已知的租戶 (Tenant) 來說是一種適宜的解決方案，亦即組戶們都相當地和藹和親，理論上不會去濫用別人的資源，也就是說大家都是好鄰居很有公德心，所以採用 Soft Multi-Tenancy 時的隔離方式，主要是希望避免意外事故的發生，而不是用來防範某個租戶對於其他租戶的惡意攻擊 Hard Multi-Tenancy 而 Hard Multi-Tenancy 則是對不同的使用者或是應用程式間實施嚴格的隔離方式，用來避免某個租戶的惡意行為給其他的租戶們帶來困擾，也就是說遇到沒有公德心且會侵犯其他人的惡鄰居，所以他可以用來當作不信任租戶間的解決方案，例如很多人使用的 AWS 就算是採用 Hard Multi-Tenancy 模式，不同的使用者之間並不會互相影響，不然要是自己儲存的機敏資料跟運行服務會被別人存取或是影響到的話，應該就沒有人敢用 AWS了 再來就是通常在做這個選擇的時候，維運人員最主要考慮的不外乎安全性和可用性這兩個： 安全性 K8s 預設使用 Namespace 和…

Setup Kubernetes Cluster Multi-tenancy with AWS EKS | by Rocky Chen | CodeX | Mar, 2021 | Medium

admin 3 months ago in

A multi-tenant cluster is shared by multiple users and/or workloads which are referred to as “tenants”. The operators of multi-tenant clusters must isolate tenants from each other to minimize the damage that a compromised or malicious tenant can do to the cluster and other tenants. Also, cluster resources must be fairly allocated among tenants. There are many articles discussing multi-tenancy on Kubernetes clusters. Typically, Kubernetes…

Multi tenancy in Kubernetes cluster | by Yogesh Kumar | Feb, 2021 | Medium

admin 4 months ago in

Multi tenancy on k8s cluster can be achieved using Namespace and RBAC approach. A multi-tenant cluster is shared by multiple users and/or workloads which are referred to as “tenants”. The operators of multi-tenant clusters must isolate tenants from each other to minimize the damage that a compromised or malicious tenant can do to the cluster and other tenants. Also, cluster resources must be fairly allocated…

Kubernetes Multi-Tenancy — A Best Practices Guide | by Daniel Thiry | Sep, 2020 | Medium

admin 9 months ago in

A guide on how to tackle typical Kubernetes multi-tenancy challenges by implementing some best practices. Kubernetes multi-tenancy is a topic that more and more organizations are interested in as their Kubernetes usage spreads out. However, since Kubernetes is not a multi-tenant system per se, getting multi-tenancy right comes with some challenges. In this article, I will describe these challenges and how to overcome them as…

Configuring multi-tenant Cloud Pak for Data environment on OpenShift | by Tomasz Hanusiak | Sep, 2020 | Medium

admin 9 months ago in

In some scenarios you need to deploy multiple Cloud Pak for Data instances (for example Prod/Dev environments, HA configuration, separation of different services), in other cases you need to install Cloud Pak for Data next to existing solutions and you want to make sure the products don’t affect each other. Since Cloud Pak for Data deploys in a dedicated namespace there is some initial separation,…

Jaeger’s multitenancy with Elasticsearch | by Moraru Costel | Aug, 2020 | Medium

admin 11 months ago in

I am an Application Architect at IBM, working on building a platform to accelerate continuous delivery with quality, ensuring a modern flexible way to enable DevOps and support an agile culture. For the past year, due to the need of distributed transaction monitoring and root cause analysis in a complex distributed micro-service environment, we introduced Jaeger framework to help us tackle the problem. Since our…

Service Mesh (Istio) patterns for Multitenancy – Sudeep Batra – Medium

admin 12 months ago in

Recently I started learning on Service Mesh and it was a very interesting journey as I explored the Service Mesh landscape starting with Layer5 tutorials and also exploring the blogs at Istio.io and Solo.io . Our organization decided to use the features of Istio for securing,managing and automating the microservices, however we have to support a multitenant environment and that became a problem for us…