[erulabs]

For whatever it’s worth my startup began life as a multi tenant kubernetes provider. We have a ton of custom controls - and for example do not allow this “custom snippet” directive at all. We spent a very long time locking down as much of the api surface as possible.

I have war stories up the wazoo - at one point we had 16k random internet users on a single cluster!