Capsule

Capsule enables native Kubernetes multi-tenancy by aggregating multiple Namespaces into a "tenant" abstraction. It enforces resource quotas, network policies, and security contexts at the tenant level. We use Capsule to safely share a single large cluster among multiple teams or customers, reducing the management overhead of cluster sprawl.