Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio
5 likes2,641 views
The document discusses the architecture and implementation of full isolation in multi-tenant SaaS environments using Kubernetes and Istio, highlighting the benefits of data privacy and security. It details deployment strategies, including the use of Helm charts for tenant-specific services and CI/CD integration. The author provides a demo application and steps for deployment, along with a Q&A section for further clarification.
Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio
- 1. Full Isolation in Multi-Tenant SaaS with Kubernetes & Istio DevOpsDays Jakarta 2019
- 2. Ichsan Rahardianto Technical Ops Lead at Brankas ichsan.rahardianto@gmail.com https://www.linkedin.com/in/irahardianto/ @irahardianto
- 3. SaaS Multi-tenancy in SaaS and Its Architectures K8S Full Isolation in Kubernetes Istio Using Istio to Route Traffic Demo Deploying and Updating Isolated Tenant Q&A Question & Answer Agenda
- 4. SaaS
- 5. SaaS In The Perspective of The Customers Low Total Cost of Ownership Time-to-Value No Maintenance Needed
- 6. Multi-Tenant SaaS Database Tenancy Patterns Measurement Multi-Tenant DB Shared App per Tenant DB Single Tenancy Tenant Isolation Low High Very high Cost Lowest Low High Development Complexity Medium Low Low Operation Complexity Low Medium High Data Privacy & Data Security Low Medium Very high Data Extraction Hardest Easy Easy
- 8. Shared App, per Tenant DB
- 9. Single Tenancy (Full Isolation)
- 10. Full Isolation Complication Complex Infrastructure Design High Cost & Low Efficiency Difficult to Maintain
- 11. Then Why The F... Full Isolation?! ResiliencyData Security & Privacy Independently Scalable & Customizable
- 12. Enter K8S
- 13. K8S
- 14. Pod
- 15. Our Deployment with K8S
- 16. Pod Resources Requests and Limits to Increase Efficiency
- 17. Add in CI/CD
- 18. Adding Custom Development Pipeline
- 20. Istio
- 21. Istio
- 22. Hipster Shop: Cloud-Native Microservices Demo Application source: https://github.com/GoogleCloudPlatform/microservices-demo
- 23. Hipster Shop Service Architecture
- 24. Istio Ingress Gateway, K8S Namespace & Virtual Service
- 25. DNS Record Set
- 27. Virtual Service
- 28. Helmchart
- 29. Namespace for Each Tenant
- 30. Deployment
- 31. Deploying The Helm Chart $ helm install --name <release-name> <helmchart>
- 32. Deploying The Helm Chart $ helm upgrade <release-name> <helmchart> --set=image.tag=<new-tag>
- 33. Demo source code: https://github.com/irahardianto/multitenant-microservices-demo
- 34. Q&A
- 35. Thank You!