How Snapchat Secures Services on Multi-Tenant Google Kubernetes Engine

Explore Snap's journey in developing a secure multi-tenant platform on Google Kubernetes Engine in this 38-minute conference talk from Google Cloud Next 2024. Dive into the key elements used for service isolation in shared clusters, including container-hardening enforcements using a Kubernetes Admission Controller, identity separation using Workload Identity Federation, and access enforcements using Kubernetes Namespaces. Gain a comprehensive overview of Snap's successes, learnings, and trade-offs in building a platform that powers Snapchat's business applications. Learn valuable insights for securing services on multi-tenant Kubernetes environments and understand the challenges and solutions in implementing robust security measures for large-scale applications.