Overview

Multi tenancy running and managing workloads for multiple organizations on a single Kubernetes cluster, while keeping those tenants logically isolated and ensuring security, resource fairness, and governance. Our implementation of multi-tenancy is a namespace based multi-tenancy.

The specific implementation for some of our component can be each found in their separate Multi-tenancy section.

In addition, Kyverno is used to enforce multiple policies that specifically prevent network communication between namespaces based on their tenant and their environment.

Namespace from a given tenant should be grouped by Project in rancher.