More and more platforms give you a namespace, not a cluster. No CRDs, a Gateway owned by the platform team and restricted Pod Security.
Design your chart for that from day one: no cluster-scoped objects, HTTPRoutes that attach to an existing Gateway, and containers that run as non-root.
Please log in or sign up to comment.