Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio

•

5 gostaram•2,614 visualizações

DevOps Indonesia

DevOps Day Jakarta Day 1 Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio by M. Ichsan Rahardianto

Tecnologia

Full Isolation in Multi-Tenant SaaS
with Kubernetes & Istio
DevOpsDays Jakarta
2019

Ichsan Rahardianto
Technical Ops Lead at Brankas
ichsan.rahardianto@gmail.com
https://www.linkedin.com/in/irahardianto/
@irahardianto

SaaS Multi-tenancy in SaaS and Its Architectures
K8S Full Isolation in Kubernetes
Istio Using Istio to Route Traffic
Demo Deploying and Updating Isolated Tenant
Q&A Question & Answer
Agenda

SaaS In The Perspective of The Customers
Low Total Cost of
Ownership
Time-to-Value No Maintenance
Needed

Multi-Tenant SaaS Database Tenancy Patterns
Measurement Multi-Tenant DB Shared App
per Tenant DB
Single Tenancy
Tenant Isolation Low High Very high
Cost Lowest Low High
Development
Complexity
Medium Low Low
Operation
Complexity
Low Medium High
Data Privacy &
Data Security
Low Medium Very high
Data Extraction Hardest Easy Easy

Full Isolation Complication
Complex Infrastructure
Design
High Cost &
Low Efficiency
Difficult to Maintain

Then Why The F... Full Isolation?!
ResiliencyData Security &
Privacy
Independently
Scalable & Customizable

Pod Resources Requests and Limits
to Increase Efficiency

Hipster Shop: Cloud-Native Microservices Demo Application
source: https://github.com/GoogleCloudPlatform/microservices-demo

Istio Ingress Gateway,
K8S Namespace & Virtual Service

Deploying The Helm Chart
$ helm install --name <release-name> <helmchart>

Deploying The Helm Chart
$ helm upgrade <release-name> <helmchart>
--set=image.tag=<new-tag>

Demo
source code: https://github.com/irahardianto/multitenant-microservices-demo

Mais conteúdo relacionado

Mais procurados

Oracle Analytics Cloud のご紹介【2021年3月版】オラクルエンジニア通信

AnthosMeena Sambamurthy

Terraform introductionJason Vance

ObservabilityDiego Pacheco

Apache Kafkaって本当に大丈夫？～故障検証のオーバービューと興味深い挙動の紹介～NTT DATA OSS Professional Services

End to end Machine Learning using Kubeflow - Build, Train, Deploy and ManageAnimesh Singh

Observability Enes Altınok

半日でわかるコンテナー技術 (応用編)Toru Makabe

ObservabilityMaganathin Veeraragaloo

わかる！metadata.managedFields / Kubernetes Meetup Tokyo 48Preferred Networks

コンテナにおけるパフォーマンス調査でハマった話Yuta Shimada

[NDC17] Kubernetes로 개발서버 간단히 찍어내기SeungYong Oh

Kubernates vs Openshift: What is the difference and comparison between Opensh...jeetendra mandal

DeNA の AWS アカウント管理とセキュリティ監査自動化DeNA

Cloud-Native ObservabilityTyler Treat

DevOps with KubernetesEastBanc Tachnologies

Private Azure Kubernetes Service cluster を触ってみよう♪Igarashi Toru

GitOps with Amazon EKS Anywhere by Dan BudrisWeaveworks

Observability For Modern ApplicationsAmazon Web Services

Istioサービスメッシュ入門Yoichi Kawasaki

Mais procurados (20)

Oracle Analytics Cloud のご紹介【2021年3月版】

Anthos

Terraform introduction

Observability

Apache Kafkaって本当に大丈夫？～故障検証のオーバービューと興味深い挙動の紹介～

End to end Machine Learning using Kubeflow - Build, Train, Deploy and Manage

Observability

半日でわかるコンテナー技術 (応用編)

Observability

わかる！metadata.managedFields / Kubernetes Meetup Tokyo 48

コンテナにおけるパフォーマンス調査でハマった話

[NDC17] Kubernetes로 개발서버 간단히 찍어내기

Kubernates vs Openshift: What is the difference and comparison between Opensh...

DeNA の AWS アカウント管理とセキュリティ監査自動化

Cloud-Native Observability

DevOps with Kubernetes

Private Azure Kubernetes Service cluster を触ってみよう♪

GitOps with Amazon EKS Anywhere by Dan Budris

Observability For Modern Applications

Istioサービスメッシュ入門

Semelhante a Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio

Webinar Series Part 2 -Recipe for a Successful SaaS Company - Migrating Sing...Techcello

Azure Community Tour 2019 - AZUGDKPeter Selch Dahl

Cloud ComputingAlicja Sieminska

Production-Ready Environments for Kubernetes (CON307-S) - AWS re:Invent 2018Amazon Web Services

Containerized Storage for ContainersOpenEBS

Containerized Storage for ContainersMurat Karslioglu

Kubernetes in 15 minutesrhirschfeld

Proposte ORACLE per la gestione dei contenuti digitali e per la ricerca scien...Jürgen Ambrosi

Dell EMC: Protect Your Workloads on AWS With Increased Scale & PerformanceAmazon Web Services

Multi-tenancy: Winning formula for a PaaSSrinath Perera

Modernize your application & Infrastructure with AWS Cloud.pptxMarketing CloudThat

Multi-Tenant SOA Middleware for Cloud ComputingSrinath Perera

Computing at the Edge with AWS Greengrass and Amazon FreeRTOS, ft. General El...Amazon Web Services

Slides-Discover-Power-of-Live-Data(2).pdfbutthead7

IoT Architecture - are traditional architectures good enough or do we need n...Guido Schmutz

Comparison of control plane deployment architectures in the scope of hypercon...Miroslav Halas

Seamless Migration of Public Sector Data and Workloads to the AWS Cloud - AWS...Amazon Web Services

Cisco Connect 2018 Malaysia - Cisco sd-wan-next generation wan to power your ...NetworkCollaborators

Enhancing SaaS Performance: A Hands-on Workshop for PartnersThousandEyes

Cisco Connect 2018 Vietnam - Cisco sd-wan-next generation wan to power your d...NetworkCollaborators

Semelhante a Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio (20)

Webinar Series Part 2 -Recipe for a Successful SaaS Company - Migrating Sing...

Azure Community Tour 2019 - AZUGDK

Cloud Computing

Production-Ready Environments for Kubernetes (CON307-S) - AWS re:Invent 2018

Containerized Storage for Containers

Kubernetes in 15 minutes

Proposte ORACLE per la gestione dei contenuti digitali e per la ricerca scien...

Dell EMC: Protect Your Workloads on AWS With Increased Scale & Performance

Multi-tenancy: Winning formula for a PaaS

Modernize your application & Infrastructure with AWS Cloud.pptx

Multi-Tenant SOA Middleware for Cloud Computing

Computing at the Edge with AWS Greengrass and Amazon FreeRTOS, ft. General El...

Slides-Discover-Power-of-Live-Data(2).pdf

IoT Architecture - are traditional architectures good enough or do we need n...

Comparison of control plane deployment architectures in the scope of hypercon...

Seamless Migration of Public Sector Data and Workloads to the AWS Cloud - AWS...

Cisco Connect 2018 Malaysia - Cisco sd-wan-next generation wan to power your ...

Enhancing SaaS Performance: A Hands-on Workshop for Partners

Cisco Connect 2018 Vietnam - Cisco sd-wan-next generation wan to power your d...

Mais de DevOps Indonesia

DevSecOps Implementation JourneyDevOps Indonesia

DevOps Indonesia X Palo Alto and Dkatalis Roadshow to DevOpsDays Jakarta 2022DevOps Indonesia

Securing an NGINX deployment for K8sDevOps Indonesia

Observability in highly distributed systemsDevOps Indonesia

DevOps Indonesia Meetup #52 - announcementDevOps Indonesia

Dev ops meetup 51 : Securing DevOps Lifecycle - AnnouncementDevOps Indonesia

Securing DevOps LifecycleDevOps Indonesia

DevOps Meetup 50 : Securing your Application - AnnouncementDevOps Indonesia

Secure your Application with Google cloud armorDevOps Indonesia

DevOps Meetup 49 Aws Copilot and Gitops - announcement by DevOps IndonesiaDevOps Indonesia

Operate Containers with AWS CopilotDevOps Indonesia

Continuously Deploy Your CDK Application by Petra novandi barusDevOps Indonesia

DevOps indonesia (online) meetup 46 aws with payfazz in devops indonesia - a...DevOps Indonesia

Securing Your Database Dynamic DB CredentialsDevOps Indonesia

DevOps Indonesia (online) meetup 45 - AnnouncementDevOps Indonesia

The Death and Rise of Enterprise DevOpsDevOps Indonesia

API Security Webinar - Credential StuffingDevOps Indonesia

API Security Webinar - Security Guidelines for Providing and Consuming APIsDevOps Indonesia

API Security Webinar - Hendra TantoDevOps Indonesia

API Security Webinar : Credential StuffingDevOps Indonesia

Mais de DevOps Indonesia (20)

DevSecOps Implementation Journey

DevOps Indonesia X Palo Alto and Dkatalis Roadshow to DevOpsDays Jakarta 2022

Securing an NGINX deployment for K8s

Observability in highly distributed systems

DevOps Indonesia Meetup #52 - announcement

Dev ops meetup 51 : Securing DevOps Lifecycle - Announcement

Securing DevOps Lifecycle

DevOps Meetup 50 : Securing your Application - Announcement

Secure your Application with Google cloud armor

DevOps Meetup 49 Aws Copilot and Gitops - announcement by DevOps Indonesia

Operate Containers with AWS Copilot

Continuously Deploy Your CDK Application by Petra novandi barus

DevOps indonesia (online) meetup 46 aws with payfazz in devops indonesia - a...

Securing Your Database Dynamic DB Credentials

DevOps Indonesia (online) meetup 45 - Announcement

The Death and Rise of Enterprise DevOps

API Security Webinar - Credential Stuffing

API Security Webinar - Security Guidelines for Providing and Consuming APIs

API Security Webinar - Hendra Tanto

API Security Webinar : Credential Stuffing

Último

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays

Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal

Artificial Intelligence: Facts and MythsJoaquim Jorge

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

What Are The Drone Anti-jamming Systems Technology?Antenna Manufacturer Coco

Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun

Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer

🐬 The future of MySQL is Postgres 🐘RTylerCroy

GenCyber Cyber Security Day PresentationMichael W. Hawkins

How to convert PDF to text with Nanonetsnaman860154

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

A Domino Admins Adventures (Engage 2024)Gabriella Davis

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

Finology Group – Insurtech Innovation Award 2024The Digital Insurer

A Year of the Servo Reboot: Where Are We Now?Igalia

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio

1. Full Isolation in Multi-Tenant SaaS with Kubernetes & Istio DevOpsDays Jakarta 2019

2. Ichsan Rahardianto Technical Ops Lead at Brankas ichsan.rahardianto@gmail.com https://www.linkedin.com/in/irahardianto/ @irahardianto

3. SaaS Multi-tenancy in SaaS and Its Architectures K8S Full Isolation in Kubernetes Istio Using Istio to Route Traffic Demo Deploying and Updating Isolated Tenant Q&A Question & Answer Agenda

4. SaaS

5. SaaS In The Perspective of The Customers Low Total Cost of Ownership Time-to-Value No Maintenance Needed

6. Multi-Tenant SaaS Database Tenancy Patterns Measurement Multi-Tenant DB Shared App per Tenant DB Single Tenancy Tenant Isolation Low High Very high Cost Lowest Low High Development Complexity Medium Low Low Operation Complexity Low Medium High Data Privacy & Data Security Low Medium Very high Data Extraction Hardest Easy Easy

7. Multi-Tenant DB

8. Shared App, per Tenant DB

9. Single Tenancy (Full Isolation)

10. Full Isolation Complication Complex Infrastructure Design High Cost & Low Efficiency Difficult to Maintain

11. Then Why The F... Full Isolation?! ResiliencyData Security & Privacy Independently Scalable & Customizable

12. Enter K8S

13. K8S

14. Pod

15. Our Deployment with K8S

16. Pod Resources Requests and Limits to Increase Efficiency

17. Add in CI/CD

18. Adding Custom Development Pipeline