Transit ops, planning, and safety each run GPU jobs on one Kubernetes cluster. How should admins separate their capacity?
Select an answer to reveal the explanation.
Short Explanation
Namespaces plus quotas are like labeled garage stalls with posted limits—each transit team parks in its own space. Shared cluster-admin and the default namespace with no caps turn fair scheduling into a free-for-all.
Full Explanation
Separate namespaces plus ResourceQuotas give Transit ops, planning, and safety hard tenancy boundaries on one shared Kubernetes cluster. Namespaces scope RBAC, NetworkPolicies, and quotas; ResourceQuotas cap CPU, memory, and extended resources such as nvidia.com/gpu so one team's batch cannot starve the others. That is how municipal capacity stays fair when three GPU-hungry groups share hardware.
Giving every team the same ServiceAccount with cluster-admin collapses tenancy: any pod can mutate cluster state, read every secret, and escape namespace limits. Running all transit teams in the default namespace with no ResourceQuotas mixes workloads, complicates policy, and lets the noisiest job consume the whole GPU pool. Letting any pod request unlimited GPUs assumes fairness emerges from contention; the scheduler has no fairness guarantee without quotas, PriorityClasses, or an external GPU orchestrator, so one oversized request can block civic ETA or safety jobs.
Exam caveat: ResourceQuotas limit aggregate requests/limits in a namespace; they do not replace PriorityClass, PDB, or node affinity. GPU quotas only work if the device plugin advertises the resource name you quota. Teams still need RoleBindings scoped to their namespace—quota alone does not stop API abuse if they hold cluster-admin.
Operational check: create one namespace per transit team, apply ResourceQuota (and LimitRange) for CPU/memory/GPU, bind least-privilege Roles, and submit a test pod that exceeds the GPU quota to confirm admission rejection. Monitor namespace usage dashboards so planning spikes do not silently exhaust the shared civic pool.