<?xml version="1.0" encoding="UTF-8"?> <references> <reference> <a1>Henschel, Jack</a1> <t1>Scalable and multi-tenant Kubernetes ingress infrastructure</t1> <t2/> <sn/> <op/> <vo/> <ab>CERN, the European Organization for Nuclear Research, is one of the world's largest centres for scientific research. Not only is it home to the world's largest particle accelerator (Large Hadron Collider, LHC), but it also the birthplace of the Web in 1989. Since 2016, CERN has been using the OpenShift Kubernetes Distribution to host a private platform-as-a-service (PaaS). This service is optimized for hosting web applications and has grown to tens of thousands of individual websites. By now, we have established on a reliable framework that deals with various use cases: thousands of websites per ingress controller (8K+ routes), dealing with long-lived connections (30K+ concurrent sessions) and high traffic applications (25TB+ per day). This session will discuss: * CERN's web hosting infrastructure based on OpenShift Kubernetes clusters; * usage of open source and in-house developed software for providing a seamless user experience; * integrations for registering hostnames (local DNS, LanDB, external) * provisioning of certificates (automatic with external-dns / ACME HTTP-01, manual provisioning) * access control policies and "connecting" different components with OpenPolicyAgent * enforcing unique hostnames across multiple Kuberenetes clustes * strategies for setting up Kubernetes Ingress Controllers for multi-tenant clusters; * methods for scaling and sharding ingress controllers according to the application's requirements (specifically HAProxy ingress controllers);</ab> <la>eng</la> <k1>Information Technology; </k1> <pb/> <pp/> <yr>2024</yr> <ed/> <ul>http://cds.cern.ch/record/2900715/files/kubernetes-ingress-infrastructure-devconf-cz.pdf; http://cds.cern.ch/record/2900715/files/kubernetes-ingress-infrastructure-devconf-cz.gif?subformat=icon; http://cds.cern.ch/record/2900715/files/kubernetes-ingress-infrastructure-devconf-cz.jpg?subformat=icon-180; </ul> <no>Imported from Invenio.</no> </reference> </references>