tencent cloud

All product documents
Tencent Kubernetes Engine
DocumentationTencent Kubernetes EngineTKE General Cluster GuideKubernetes Object ManagementNamespace
Namespace
Download PDF
Last updated: 2024-12-19 22:09:58
Namespace
Last updated: 2024-12-19 22:09:58
Download PDF
A Namespace is the object of logical environment division in the same cluster in Kubernetes. You can manage the division of multiple teams or projects using Namespaces. In a Namespace, the name of a Kubernetes object must be unique. You can use ResourceQuotas to allocate available resources and control the access to different Namespace networks.

How to Use

Use in the TKE console: You can add, delete, change, and query Namespaces in the TKE console.
Use with kubectl: For more information, see Kubernetes' official documentation.

Setting Usage Quota of a Namespace Resource with a ResourceQuota

You can have multiple ResourceQuota resources under one Namespace, and each ResourceQuota can set usage constraints for each Namespace resource. You can set the following usage constraints for Namespace resources:
Compute resource quotas, such as CPU and memory.
Storage resource quotas, such as total storage of requests.
Kubernetes object count quotas, such as the number of Deployments.
The quota settings supported by ResourceQuota vary slightly by Kubernetes version. For more information, see Kubernetes' official document about ResourceQuota. Below is an example of ResourceQuota:
apiVersion: v1
kind: ResourceQuota
metadata:
  name: object-counts
  namespace: default
spec:
  hard:
    configmaps: "10"  ## Up to 10 ConfigMaps
    replicationcontrollers: "20" ## Up to 20 ReplicationControllers
    secrets: "10" ## Up to 10 Secrets
    services: "10" ## Up to 10 Services
    services.loadbalancers: "2"  ## Up to 2 Services in LoadBalancer mode
    cpu: "1000" ## Up to 1,000 CPU resources can be used under this Namespace
    memory: 200Gi ## Up to 200 Gi of memory can be used under this Namespace

Setting Access Control for a Namespace Network Using a NetworkPolicy

NetworkPolicy is a resource provided by Kubernetes (K8s) to define a Pod-based network isolation policy. You can not only restrict Namespaces, but also control network access among Pods, i.e., controlling whether a group of Pods can communicate with another group or other network endpoints.
For details about how to deploy a NetworkPolicy Controller in a cluster and implement network access control among Namespaces using a NetworkPolicy, see Using NetworkPolicy for Network Access Control.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon