In a hub-and-spoke architecture, where we have a c...
# generalc
Colt McNealy
10/03/2023, 3:44 PMIn a hub-and-spoke architecture, where we have a central Control Plane (where customers go to create clusters or accounts on a multi-tenant cluster), should the IDP (eg. Keycloak) live in the control plane, or should there be one instance in each data plane cluster? I am leaning to a central one for every multi-tenant account, but dedicated clusters get their own keycloak.
Colt McNealy
10/03/2023, 3:44 PMAlso, I know I'm spamming y'all with questions, just let me know if there are too many coming 🙊
m
Mitch
10/03/2023, 4:56 PMcentralized! that IDP will need to be audited and logged like crazy. Centralization makes that so much easier
gratitude thank you 1
👍 2