- Hrvoje Markovic - Schlumberger
- Joe Nieten - AWS
- Kadri Umay - MSFT
- David Holmes - Dell Technologies
- Alex Narayanan - Schlumberger
- Jaspreet Singh - Infosys
- Ethiraj Krishnamanaidu - Schlumberger
- Vlad Korniev - Google
Business problem to solve
Multi-tenancy is a software architecture that allows multiple instances to be securely operated on a single instance of a piece of software. Multi-tenant systems provide hard security boundaries and work on the basis that users of one tenant instance should not even be aware of the existence of another tenant. There are two potential use cases for multi-tenancy:
- Service Companies offering SAAS solutions. In this case a service company wishes to run a single instance of OSDU which supports multiple customers running their application(s).
- Operators With Hard Security Requirements for OpCos/JVs. In certain situations it is desirable for operators to be able to run an instance of OSDU within their implementation but with hard security boundaries that prevent users of that instance from accessing any information from other instances. This could be for regulatory reasons or because an OpCo is being setup as a JV with another operator/partner.
OSDU R1 does not currently support multi-tenancy. OpenDES does have support for multi-tenancy although it is not clear if/how this support will be incorporated in R2/R3.
Do not support multi-tenancy in the platform. Require a new instance of OSDU where a hard security boundary is required. Mitigate the complexity of managing many instances of OSDU using management and orchestration tooling and automation.
Implement multi-tenancy within the OSDU platform. Ensure that all aspects of the platform (deployment, management, availability, updates, security, logging, billing etc.) can be securely managed according to multi-tenant principles.
Adopt the current OpenDES approach to multi-tenancy as is unless it proves infeasible (technically or sustainability) on other platforms.
State as of October'19
- Currently implemented on Google
- Already partially implemented on Azure on the path to R2