Kubernetes Multi-Tenancy: Namespace Isolation, RBAC, and Network Policies Explained Most teams running shared Kubernetes clusters believe they have isolation. They have namespaces. They have different teams deploying to different namespaces. It feels like separation. It is not. Kubernetes was designed as a single-tenant system. Multi-tenancy is not a built-in feature. It is a property you constru…
This week, I was updating the image of a FastAPI app in our Kubernetes cluster, but I took the whole app down because the process failed due to an incompatible dependency with our server. The updated pod was unable to start, but we didn't have health checks in place, so the deployment continued to update the other replicas, taking down all app instances. In this tutorial, I will explain how to ad…
Scaling Kubernetes DNS with ExternalDNS and Route 53 As our Kubernetes platform scaled across multiple environments and regions, DNS management started becoming a bottleneck. What initially worked as a centralized setup began to introduce operational challenges such as API throttling and increasing manual effort. In this article, I’ll walk through how we evolved our DNS architecture using Externa…
