Checkout-stage and checkout-prod for the city storefront share one OKE cluster. What Kubernetes unit keeps their Services, ConfigMaps, and Secrets from clobbering each other?
Select an answer to reveal the explanation.
Short Explanation
Namespaces are separate drawers in the same filing cabinet (cluster). Stage and prod Services, ConfigMaps, Secrets, and RBAC stay out of each other's way. An OCI compartment is tenancy IAM—not a substitute for Kubernetes isolation.
Full Explanation
Namespaces scope names, Services, ConfigMaps, Secrets, and RBAC so an apply in checkout-stage cannot overwrite checkout-prod on the same cluster. Sharing default invites collisions. OCI compartments organize cloud resources for IAM; they are not Kubernetes namespaces and do not live in the Pod spec as a replacement isolation unit.