DEV Community

Cover image for Namespace as a Service with vanilla kubernetes objects
Ashok Nagaraj
Ashok Nagaraj

Posted on

1 1

Namespace as a Service with vanilla kubernetes objects

With plain kubernetes objects a simple multi-tenancy model can be achieved using the following kubernetes objects:

  1. namespace
    This creates a namespace object with additional annotations (to be used later for additional capabilities)

  2. resourcequota to apply quotas in-terms of:

  3. cpu

  4. memory

  5. total storage volume

  6. pv counts

  7. pvc counts

  8. pod counts

  9. secret counts

  10. service counts (clusterIP, nodePort and loadBalancer)

  11. limitrange default min and max for cpu, memory and pvc sizes

optionally

  1. networkpolicy to restrict ingress and egress traffic

  2. serviceaccount for generic account for machine users and automation use-cases

  3. rbac for authorization use cases

Repo link with a helm chart to do the above is here

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

Top comments (0)

The Most Contextual AI Development Assistant

Pieces.app image

Our centralized storage agent works on-device, unifying various developer tools to proactively capture and enrich useful materials, streamline collaboration, and solve complex problems through a contextual understanding of your unique workflow.

👥 Ideal for solo developers, teams, and cross-company projects

Learn more

👋 Kindness is contagious

Please leave a ❀ or a friendly comment on this post if you found it helpful!

Okay