most teams building multi-tenant k8s skip the only decision that matters: do the tenants trust each other?

yes → namespaces + rbac + quota + default-deny netpol. native, cheap, enough.
no → no amount of yaml fixes a shared api server and a shared kernel. vcluster or separate clusters.

walk it in order, stop at the first "no".

https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team

#kubernetes #selfhosting #infrastructure #devops