Terraform Module: Kubernetes Hardened Namespace (PSA + default-deny NetworkPolicy + quotas)

Multi-tenant Kubernetes namespaces created hardened by default: Pod Security Admission labels, ResourceQuota, LimitRange, default-deny NetworkPolicy with DNS still working, no-automount ServiceAccount, namespace-scoped RBAC, and one audit_evidence output for the reviewer.

Inputs

• namespaces
• common_labels
• common_annotations
• pod_security_version
• dns_namespace
• dns_pod_labels
• deployer_subjects
• viewer_subjects
• deployer_can_read_secrets
• image_pull_secret
• image_pull_secret_name

Use

module "x" {
  source = "./terraform-module-kubernetes"
}