Multi-tenant Kubernetes namespaces created hardened by default: Pod Security Admission labels, ResourceQuota, LimitRange, default-deny NetworkPolicy with DNS still working, no-automount ServiceAccount, namespace-scoped RBAC, and one audit_evidence output for the reviewer.
namespacescommon_labelscommon_annotationspod_security_versiondns_namespacedns_pod_labelsdeployer_subjectsviewer_subjectsdeployer_can_read_secretsimage_pull_secretimage_pull_secret_namemodule "x" {
source = "./terraform-module-kubernetes"
}
After the free one you have one hardened namespace and no way to say the same sentence about the other forty. The paid module is the map: one namespaces map drives every tenant, all 9 environment x workload presets, cross-namespace egress/ingress allowlists, deploy and read-only RBAC bound to your g
One payment, one licence key for this tool. The key is shown right after payment.
Checkable without trusting us: the module validates against the real provider schema (terraform validate passed with hashicorp/kubernetes), and the four kubectl commands in the README verify every promise against your own cluster
Buy the full version — $3Need more than this one? ReadyStack Pass opens all 592 files and 513 full versions — $29/month or $199/year. See the Pass →