01 / IDENTITY
A defined scope.
Namespace-scoped access keeps tenant permissions separate from platform administration.
Separate by intention.
Tenant A
Your own space. A shared foundation.
Boundaries that belong in the architecture.
Workspace address
tenant-a.sharifrezaie.com
Request path
HTTPS / TLS 1.2+
- BrowserEncrypted connection
- Cloudflare DNStenant-a.sharifrezaie.com
- Load balancerDedicated ALB / ACM
- ServiceClusterIP / port 80
- Tenant A pods2 configured replicas
Configured boundaries
NAMESPACE / tenant-a
02 / NETWORK
Only intended paths.
Default-deny policies limit pod traffic. Explicit rules admit DNS and application ingress.
03 / WORKLOAD
Less privilege. By default.
Non-root containers, a read-only filesystem, and resource limits define the workload baseline.