Building a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]
summary
Deployment Cluster Config and Ops (deco operator) automates creating namespaces, DNS records and CRD-driven apps, injecting s‑tunnel sidecar containers for per-app TLS termination and client cert verification. It chains k8sniff + nginx chain so TCP services (MySQL, AMQP) route via k8sniff to TCP ingresses while HTTP paths go to nginx, and it enforces isolation with Kubernetes NetworkPolicy plus per-customer CA hierarchies. Demo shows DNS, a MySQL TLS connection and a Keystone HTTP path working, and a deployment scaling from 1 to 3 pods.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:43Use Case
- 5:15Space
- 9:32Project
- 11:45Traffic Management
- 19:28Demo
- 22:30Creating the App
- 24:08Testing the App
related talks
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
31mEffective building blocks for securing...
57mBulletproof Microservices with Spring and Kubernetes
32mService Networking Within Air-Gapped Environments: Deployment Strategies and Operat...
57mThe Kubernetes Sessions Security
32mContainer and Kubernetes security policy design
38mModern Service Networking With Consul Connect, Envoy and Kubernetes
25mAdministering Multi Cluster Service Meshes Securely