Landing Zones
The Kubernetes Landing Zone can be used to configure how Namspaces are created inside a shared Kubernetes Cluster.
meshRole to Platform Role Mapping
The meshProject roles must be mapped to Kubernetes specific Cluster Roles. This cluster role is then assigned to the users for their namespace via a Role Binding.
You are able to control this mapping with a Landing Zone setting. Usually its a good idea to setup own Cluster Roles in Kubernetes before and then map them to their
meshStack counterpart. But you can also use predefined Kubernetes Cluster Roles like editor
or viewer
.
Resource Quota
Kubernetes ResourceQuotas are used to limit the number of resources inside a namespace (which represents a meshProject). In this Landing Zone setting you can put in your Quotas.