Namespaces-as-a-Service

[JimBugwadia]

[JimBugwadia]

Add option to register any Kubernetes cluster and provision a secure, isolated, namespace for a team / app.

The "owner" would get admin permissions in the namespace.

[morey-tech]

From 2024-01-26 meeting:

• Namespace should be ordered from Backstage.
• How to pick the right cluster to deploy the namespace to?
  • Are some clusters "multi-tenancy" enabled? (available for NaaS)
• What are the roles of the components for NaaS:
  • Backstage: dev portal, puts configurations in Git.
  • Argo CD: deploys stuff from git to control-plane cluster
  • Crossplane: managed resources on providers.
  • Kyverno: validates the configurations and enforces them.

[kurktchiev]

TODO for @kurktchiev: add a decision record Issue under https://github.com/back-stack/architecture-decision-records