Roshan Subudhi, Jaison Paul, and Jeff Spahr, Capital One
As enterprises scale their cloud-native footprint, multi-tenancy in Kubernetes is essential but presents major challenges: the 'Noisy Neighbor' problem, security drift, and scaling operational governance. This session details how we successfully consolidated over 120 development teams onto shared clusters by implementing a layered, policy-driven architecture.
We detail our systemic approach leveraging UserID vs. AD Group namespaces and Kyverno policies to automatically enforce Resource Quotas and default-deny NetworkPolicies. This strategy delivered a 99.9% reduction in resource contention incidents, achieved 100% security compliance, and cut onboarding time from hours to under 5 minutes.
Roshan Subudhi is an Engineering Manager in the AI/ML org at Capital One. He has been working with Kubernetes over the past several years with flavors like AWS EKS, Azure AKS, GKE/Anthos, Rancher, Mirantis, RedHat OCP and KOTS. Based in Northern Virginia, you'll find him sneaking a ride on his HD Sportster or building his Lego collection when not babysitting (some might say parenting) his two kids.
Jaison Paul is a Sr. Lead Engineer at Capital One, specializing as a Site Reliability Engineer (SRE) with a focus on Kubernetes. With 8 years of dedicated experience in the Kubernetes ecosystem, he is an expert in managing and scaling containerized environments. He excels at building resilient infrastructure and optimizing system reliability for large-scale enterprise operations.
Jeff Spahr is a Director in the AI/ML organization at Capital One. He has a background in cloud computing and Kubernetes focused on scaling high performing infrastructure and platform teams. He is a long-time Kubernetes enthusiast, and his passion for infrastructure extends from global-scale cloud deployments to the Raspberry Pi cluster running in his home office. Jeff enjoys sharing his technical journey and lessons learned with the broader community at conferences like KubeCon and All Things Open. He lives in Raleigh, NC, with his wife and two children.
author = {Roshan Subudhi and Jaison Paul and Jeff Spahr},
title = {Achieving Secure, Scalable {Multi-Tenancy} in Kubernetes with Kyverno and Advanced Namespace Management},
year = {2026},
address = {Seattle, WA},
publisher = {USENIX Association},
month = mar
}
