Watch and track your favorite playlist.
Curated by: CNCF [Cloud Native Computing Foundation] (43 videos)
在惠普 OneCloud 平台中的多租户管理 | Multi-Tenant Management in HP OneCloud Platform - John Zheng, HP 对于云平台来说,多租户管理是一个热门话题和常见需求。作为惠普最大的云平台(并逐渐成为惠普唯一的云平台),HP OneCloud 平台正在支持数百个项目,我们将这些受支持的项目称为租户。借助 Istio,我们成功地实现了多租户管理。其中包括: 每个租户的 API 速率限制,基于令牌中的租户 ID 值。[使用 envoy ratelimit] API 认证和授权。[使用外部授权(https://istio.io/latest/docs/tasks/security/authorization/authz-custom/)] 为租户增强可观察性 - 自定义 Istio 访问日志,添加 Tenant_id 字段 - 自定义 Istio 指标,添加 Tenant_id 字段 基于 API 访问计数的每个租户的成本计算... 我希望分享我们的经验。我很乐意与听众讨论并共同改进。 For cloud platforms, multi-tenant management is a hot topic and a common need. As the HP's largest cloud platform (and becoming HP's only cloud platform), HP OneCloud Platform is supporting hundreds of projects, we call supported projects as tenants. With Istio, we implemented multi-tenant management well. Includes: * API Ratelimit per tenant, based on the tenant_id value from token. [Using envoy ratelimit] * API Authentication and Authorization [Using External Authorization (https://istio.io/latest/docs/tasks/security/authorization/authz-custom/) ] * Observability Enhance for tenant - Customize Istio access logs, adding field Tenant_id - Customize Istio metrics, adding field Tenant_id * Cost calculate per tenant, based on API access count ... ... I would like to sharing our experience on it. I am happy to discuss with audiences and improve together.