Multitenancy concept
The Shturval platform multitenancy model lets you manage an additional level of abstraction beyond clusters and namespaces — tenants.
The multitenancy model includes access management in tenants, as well as the ability to manage access permissions within tenants.
Tenants let you group:
- multiple clusters;
- multiple namespaces in one cluster;
- multiple namespaces across multiple clusters.
By default, the platform creates system tenants that cannot be duplicated, modified, or deleted by users:
- platform, which includes all clusters and all namespaces created on one platform;
- a tenant that includes one cluster. Created for each cluster created on the platform.
This approach lets you group objects in different ways, for example:
- By system: if several different systems run on the platform, you can group clusters and/or namespaces of those systems into corresponding tenants and assign unified access to the system.
- By environment: if one or more clusters are split by environment, you can group all namespaces of one environment into a tenant and grant access to that environment.
- By namespace type: group system/custom namespaces across clusters to simplify access assignment.
If a tenant groups entire clusters (namespaces are set to *), cluster-level access sets are available for assigning permissions.
If a tenant groups namespaces, namespace-level access sets are available for assigning permissions.
Future releases plan to support creating various objects within tenants.