k8s-platform-tenancy

What problem does it solve?

Provisioning new tenants in a multi-tenant Kubernetes cluster can be error-prone and time-consuming without standardized templates for namespace creation, RBAC, quotas, and network isolation.

Core Features & Use Cases

• Provision tenant namespaces with labels, quotas, and lifecycle utilities to support self-service provisioning.
• Enforce RBAC patterns for tenant admins and developers, enabling controlled access per tenant.
• Apply ResourceQuota, LimitRange, and PodSecurity standards to ensure resource and security boundaries.
• Establish network isolation via baseline NetworkPolicies and tenant-specific policies.
• Support onboarding and offboarding workflows with checklists and automated resource configurations.

Quick Start

Create a new tenant namespace with standard labels, apply the Pod Security Standards as restricted, configure quotas and limits, and establish tenant RBAC and network policies.