Multi-tenant Kubernetes using HNC

In a managed Kubernetes platform, we want to isolate resources, teams, and users wherever possible to enhance the service ownership experience, improve security, and ensure the resiliency of the workloads running there.

Hierarchical namespaces in Kubernetes can help with this isolation. It provides you with a powerful tool for managing the permissions for each tenant and their capabilities.

Hierarchical Namespace Controller (HNC) helps you to set all of this up in your managed Kubernetes platform, and make the experience truly multi-tenant.

With HNC you get:

• namespaces organized into trees
• the capability to add more namespaces to those trees
• improved granularity for namespace labels, delegated management, and sharing resource quotas across related namespaces

HNC is a great value add for a multi-tenant Kubernetes platform, and you should consider trying it out of you’re running such an environment to improve isolation capabilities and the overall service owner experience.