01 / IDENTITY
A defined scope.
Namespace-scoped access keeps tenant permissions separate from platform administration.
Separate by intention.
Tenant B
Your own space. A shared foundation.
Boundaries that belong in the architecture.
Workspace address
tenant-b.sharifrezaie.com
Request path
HTTPS / TLS 1.2+
- BrowserEncrypted connection
- Cloudflare DNStenant-b.sharifrezaie.com
- Load balancerDedicated ALB / ACM
- ServiceClusterIP / port 80
- Tenant B pods2 configured replicas
Configured boundaries
NAMESPACE / tenant-b
02 / NETWORK
Only intended paths.
Default-deny policies limit pod traffic. Explicit rules admit DNS and application ingress.
03 / WORKLOAD
Less privilege. By default.
Non-root containers, a read-only filesystem, and resource limits define the workload baseline.