liveBook · Manning

Multitenancy

As explained in Google Anthos in Action

Multitenancy is an architecture in which multiple teams or tenants share a platform while retaining logical separation of their workloads and resources.

Multitenancy lets multiple independent teams or tenants share one platform while keeping workloads and resources logically separated. In Kubernetes, namespaces provide the logical partition; tenants remain physically integrated in the same cluster. section 3.2.6

Build safer tenant boundaries with namespace-scoped controls:

  • Use namespaces to scope resource names and organize each tenant's workloads. section 3.2.6
  • Apply RBAC to control which users and administrators can access tenant resources. section 3.2.6
  • Combine resource quotas, network policies, and namespace security resources to constrain usage and communication. section 3.2.6

Namespace-based tenant identity

A sales namespace can contain services such as myweb1 and myweb2, whose cluster DNS names include the namespace: myweb1.sales.svc.cluster.local and myweb2.sales.svc.cluster.local. section 3.2.6

Centralized multitenant operations can aggregate clusters and workloads into one dashboard, but require safeguards because administrators may not need access to every environment or tenant. section 2.1

How Google Anthos in Action covers it

How deep it goes
Explains namespace boundaries and namespaced controls, then identifies RBAC, quotas, network policies, and security resources without detailing their implementation.
Examples
Uses sales namespaces, namespace-qualified service DNS names, and centralized dashboards spanning multicloud or hybrid clusters.
What it assumes
Assumes familiarity with Kubernetes clusters and resources while defining namespaces as logical partitions.
What you can do after
Designs tenant boundaries with namespaces and selects access, quota, network, and security controls for safer shared clusters.
How it connects
Connects multitenancy to Kubernetes namespaces, RBAC, resource quotas, network policies, namespace security, and centralized operations.
Cover of Google Anthos in Action
liveBookmanning.com
Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

Compare how 3 books explain multitenancy →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.