The Shared Service Blueprint: A Guide to Multi-Tenancy, Illustrated With KEDA - Aya Igarashi

This talk covers the essential considerations for providing services in a multi-tenant Kubernetes environment, focusing on maintaining strong tenant isolation. Aya Igarashi from Preferred Networks, Inc. shares practical lessons and insights drawn from their experience, utilizing KEDA, an event-driven autoscaler, as a case study. Key topics include architectural trade-offs, secure design principles for multi-tenant components, effective NetworkPolicy patterns, the limitations of Kubernetes APIService in multi-tenancy, and authentication mechanisms for a Kubernetes External API Server. By the end of the session, attendees will gain actionable insights for architecting secure multi-tenant services and a deeper understanding of Kubernetes extension mechanisms.