Kubernetes
You're viewing a free preview. Sign in free to read every script.
Why this exists A brand new, empty namespace on a shared cluster is an open door: nothing stops one team's Pod from consuming every core on a node, nothing stops it from talking to every other namespace's Pods, and…
Namespace Bootstrap: Quotas, Limits, RBAC and a Default-Deny NetworkPolicy in One Script
A script that creates a new namespace with every guard rail a shared cluster needs from day one — a ResourceQuota, a LimitRange that gives a bare Pod real defaults, a default-deny NetworkPolicy, and an RBAC Role scoped to the namespace — with each one proven against a real cluster, not just described.
Sign in free to read this script, along with the rest of the library.
Sign in free