Question

Which of the following is a data-plane isolation measure in a Kubernetes multi-tenancy scenario?

Accepted Answer

A. Assign a dedicated set of workers to run Pods from each tenant.

Answer

Assign a dedicated namespace to Pods from each tenant.

Answer

Enforce Roles and RoleBindings tied to specific namespaces only, forbid cluster-wide roles.

Answer

Enforce Object Count Quotas via the ResourceQuota admission controller.