Terraform Module Kubernetes Namespace for Platform Teams - quota, LimitRange, default-deny NetworkPolicy, Pod Security Admission & namespaced RBAC

Creates one hardened multi-tenant Kubernetes namespace: Pod Security Admission labels, default-deny NetworkPolicy plus named exceptions, ResourceQuota, LimitRange, a non-automounting ServiceAccount, an optional registry Secret passed as a sensitive variable, and namespaced Roles/RoleBindings.

Inputs

• namespace
• tenant
• labels
• annotations
• pod_security_enabled
• pod_security_level
• pod_security_version
• resource_quota_enabled
• resource_quota_hard
• limit_range_enabled
• container_default_limits
• container_default_requests
• container_max
• container_min
• pvc_max
• pvc_min
• network_policy_enabled
• dns_namespace
• allow_same_namespace_traffic
• allowed_ingress_namespaces

Use

module "x" {
  source = "./terraform-module-kubernetes-namespace"
}