This talk will focus on addressing the challenge of Backstage's non-multi-tenant design, we propose a unique architecture for deploying separate Backstage instances per organisation in a shared Kubernetes cluster. Each instance will be isolated within customer-specific namespaces, ensuring data integrity and security. Our approach involves setting up individual IDP instances for each oraginisation, reinforcing authentication and authorization security.
We will also discuss on how this architecture not only addresses the immediate challenges of deploying a non-multi-tenant application like Backstage in a multi-tenant environment but also sets the stage for a secure, scalable, and efficient future, benefiting the entire ecosystem.
The proposed architecture paves way for providing backstage as a managed SaaS solution, adding business value and promoting the project among developers thereby increasing upstream collaboration and contribution.