What is Kubernetes Multi-Tenancy?

Question

Accepted Answer

**Multi-Tenancy** — isolation of multiple teams in a shared cluster.

**1. Namespace + RBAC:**
```yaml
apiVersion: v1
kind: ResourceQuota
metadata:
  name: team-a-quota
  namespace: team-a
spec:
  hard:
    requests.cpu: "8"
    requests.memory: "16Gi"
    pods: "50"
```

**2. Network Policies:**
```yaml
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: deny-cross-namespace
spec:
  podSelector: {}
  ingress:
    - from:
        - podSelector: {}
```

**3. Node Isolation:**
```yaml
spec:
  nodeSelector:
    node-group: team-a
  tolerations:
    - key: team-a
      value: "true"
      effect: NoSchedule
```

**Tools:** HNC, Capsule, vCluster.

DevOps: What is Kubernetes Multi-Tenancy?