20221213 Flux Scale Soft Multitenancy Pinky Russ
Channel: Weaveworks, Inc.
Date: 2022-12-14

Soft multi-tenancy can be hard to achieve and secure. Multiple tenants sharing the same cluster means there are global objects, like Custom Resource Definitions (CRDs), namespaces, and so on, that you don’t want tenants controlling. You should separate platform admins, cluster admins, and tenants, with dedicated namespaces, role binding, node groups, taints and tolerations, etc.

Flux enforces tenant isolation by default, so you don’t have to worry about accidental tenant cross-contamination.

In this session, Pinky & Russ walk you through how to set up multi-tenancy on an existing Kubernetes cluster and manage several tenants within the cluster.

Take advantage of the benefits that come with infrastructure as code.

Resources:
⭐️ Flux website: fluxcd.io
⭐️ Flux Docs: fluxcd.io/flux
⭐️ Flux Multi-cluster setup:
https://fluxcd.io/flux/get-started/#multi-cluster-setup
https://github.com/fluxcd/flux2-kustomize-helm-example
⭐️ Additional Best Practices for Shared Cluster Multi-tenancy: https://fluxcd.io/flux/security/best-practices/#additional-best-practices-for-shared-cluster-multi-tenancy
⭐️ Kyverno Doc to Generate Flux Multi-tenant Resources: https://kyverno.io/policies/flux/generate-flux-multi-tenant-resources/generate-flux-multi-tenant-resources/ 
------------------------------------
Speaker Bios:

Priyanka “Pinky” Ravi is a Developer Experience Engineer at Weaveworks. She has worked on a multitude of topics including front end development, UI automation for testing and API development. Previously she was a software developer at State Farm where she was on the delivery engineering team working on GitOps enablement. She was instrumental in the multi- tenancy migration to utilize Flux for an internal Kubernetes offering.

Russell "Russ" Parmer is a Senior Engineer at Weaveworks. His primary focus has been helping to enable and mature progressive delivery practices. He began his career in retail management before being blessed with the opportunity to return to school. In 2015 he earned a Bachelor of Science in Software Engineering degree from Arizona State University. He likes to tell people he took the ‘scenic route’ through college, but it is more of a reminder that it’s never too late to achieve your dreams.