Namespace Hardening Pack

Namespace Hardening — Multi-Tenant Safe by Default

Every shared cluster needs guardrails. This Helm chart drops resource quotas, LimitRanges, NetworkPolicies, and baseline RBAC onto any namespace in one install — no YAML spelunking required.

What is Included

• ResourceQuota templates for CPU, memory, and object counts
• LimitRange defaults so pods without requests/limits still behave
• Default NetworkPolicy blocking inter-namespace traffic (allow-list approach)
• Baseline RBAC roles: read-only, developer, and namespace-admin

Developer Experience

Fully values-configurable. Pass your quota sizes, toggle NetworkPolicy strictness, or disable individual components via values.yaml. Drop it into any namespace — new or existing — without touching other namespaces.

What You Get

• Helm chart source with Chart.yaml, values.yaml, and all templates
• Example values-production.yaml and values-dev.yaml
• README.md explaining each configurable parameter

Requirements

• Kubernetes >= 1.21
• Helm >= 3.8
• Cluster-admin access to target namespace