Rbac on marktaguiad.dev

Kubernetes Multi-Tenancy

marktaguiad@marktaguiad.dev (Mark Taguiad) — Sat, 11 Apr 2026 00:00:00 +0000

Multi-tenancy in Kubernetes is the practice of running multiple users, teams, or customers (tenants) on a shared cluster while keeping them isolated, secure, and fairly resourced.

At first glance, it sounds simple—just create namespaces and you’re done. In reality, building a safe multi-tenant platform requires layering multiple controls together.

Overview

Let’s assign team web-dev to namespace web.

Kubernetes RBAC

marktaguiad@marktaguiad.dev (Mark Taguiad) — Tue, 07 Apr 2026 00:00:00 +0000

Role‑Based Access Control (RBAC) is a core part of Kubernetes security — it lets you grant precise permissions to users, groups, or service accounts so they can do only what they’re allowed. In this hands‑on guide, we’ll go step‑by‑step through:

creating a Kubernetes user
assigning permissions using RBAC
testing permissions

Create Kubernetes User

Let’s automate this process-in the perspective of an admin. Use the script to create user.

Istio: mTLS and RBAC

marktaguiad@marktaguiad.dev (Mark Taguiad) — Tue, 24 Mar 2026 00:00:00 +0000

Continuation of Kubernetes Istio, this time we’ll focus on Security.

Security

mTLS (Mutual TLS)

This will ensure that service-to-service traffic is encrypted and authenticated.

Istio allows you to configure three main modes per namespace, workload, or globally:

Mode	Behavior	When to Use
STRICT	Only allows mTLS-encrypted traffic. Plain HTTP connections are rejected.	Best for production when you want full security between services.
PERMISSIVE	Accepts both mTLS-encrypted and plain HTTP traffic.	Useful during gradual migration to mTLS. Old workloads can still communicate without encryption.
DISABLE	Does not use mTLS at all.	For testing, legacy workloads, or non-critical traffic.

You might get confused with the HTTPS traffic, it just mean that all traffic are converted by istio envoy to mTLS. So as long as the request is going through first the sidecar then it is valid.

Rbac on marktaguiad.dev

Kubernetes Multi-Tenancy

Table of Contents

Overview

Kubernetes RBAC

Table of Contents

Create Kubernetes User

Istio: mTLS and RBAC

Table of Contents

Security

mTLS (Mutual TLS)