DevOps Day Jakarta Day 1 Full Isolation in Multi-Tenant SAAS with Kubernetes & Istio by M. Ichsan Rahardianto

1. Full Isolation in Multi-Tenant SaaS
with Kubernetes & Istio
DevOpsDays Jakarta
2019

2. Ichsan Rahardianto
Technical Ops Lead at Brankas
ichsan.rahardianto@gmail.com
https://www.linkedin.com/in/irahardianto/
@irahardianto

3. SaaS Multi-tenancy in SaaS and Its Architectures
K8S Full Isolation in Kubernetes
Istio Using Istio to Route Traffic
Demo Deploying and Updating Isolated Tenant
Q&A Question & Answer
Agenda

4. SaaS

5. SaaS In The Perspective of The Customers
Low Total Cost of
Ownership
Time-to-Value No Maintenance
Needed

6. Multi-Tenant SaaS Database Tenancy Patterns
Measurement Multi-Tenant DB Shared App
per Tenant DB
Single Tenancy
Tenant Isolation Low High Very high
Cost Lowest Low High
Development
Complexity
Medium Low Low
Operation
Complexity
Low Medium High
Data Privacy &
Data Security
Low Medium Very high
Data Extraction Hardest Easy Easy

7. Multi-Tenant DB

8. Shared App, per Tenant DB

9. Single Tenancy (Full Isolation)

10. Full Isolation Complication
Complex Infrastructure
Design
High Cost &
Low Efficiency
Difficult to Maintain

11. Then Why The F... Full Isolation?!
ResiliencyData Security &
Privacy
Independently
Scalable & Customizable

12. Enter K8S

13. K8S

14. Pod

15. Our Deployment with K8S

16. Pod Resources Requests and Limits
to Increase Efficiency

17. Add in CI/CD

18. Adding Custom Development Pipeline

19. Leveraging Managed Databases

20. Istio

21. Istio

22. Hipster Shop: Cloud-Native Microservices Demo Application
source: https://github.com/GoogleCloudPlatform/microservices-demo

23. Hipster Shop Service Architecture

24. Istio Ingress Gateway,
K8S Namespace & Virtual Service

25. DNS Record Set

26. Istio Ingress Gateway

27. Virtual Service

28. Helmchart

29. Namespace for Each Tenant

30. Deployment

31. Deploying The Helm Chart
$ helm install --name <release-name> <helmchart>

32. Deploying The Helm Chart
$ helm upgrade <release-name> <helmchart>
--set=image.tag=<new-tag>

33. Demo
source code: https://github.com/irahardianto/multitenant-microservices-demo

34. Q&A

35. Thank You!