# Multiple namespaces vs multiple clusters? **URL:** \ **Category:** General Discussions\ **Created:** [June 4, 2018, 10:31pm UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826 "2018-06-04T22:31:09Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Idan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/idan/32/2207_2.png) [@Idan](https://discuss.kubernetes.io/u/Idan)\ **Post date:** [June 4, 2018, 10:31pm UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/1 "2018-06-04T22:31:09Z")
Hi Guys, I’m working on moving a big group of ~70 engineers (6 teams), developing one product, to use Kuberenetes. Do you have a recommendation of whether we should go with one cluster and multiple namespaces or just multiple clusters? any pros & cons? Thanks! Idan ---
**Author:** ![nhat](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/nhat/32/500_2.png) [@nhat](https://discuss.kubernetes.io/u/nhat)\ **Post date:** [June 5, 2018, 8:46am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/2 "2018-06-05T08:46:29Z")
Depends on your physical resources and human resources I would say. If your engineers are familiar with Kubernetes operations and your budget allows you to, I would go with multiple clusters for better isolation and for not creating a single point of failure. Otherwise, one cluster with multiple namespaces + RBAC enabled and network policy should work. ---
**Author:** ![Idan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/idan/32/2207_2.png) [@Idan](https://discuss.kubernetes.io/u/Idan)\ **Post date:** [June 6, 2018, 1:10am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/3 "2018-06-06T01:10:40Z")
They aren’t all familiar with K8s, but we can take the time to teach them. We run on top of Azure, so no physical resources problem, just costs maybe. The advantages I see in using namespaces, is that we share the same infra, both in terms of scale and internal networks, so we can also use things like service-mesh for network policies, advanced routing, canary, etc. (Envoy, Istio, etc.) For HA, we can have two clusters instead of one. ---
**Author:** ![yomateod](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/yomateod/32/593_2.png) [@yomateod](https://discuss.kubernetes.io/u/yomateod)\ **Post date:** [October 29, 2018, 10:14am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/4 "2018-10-29T10:14:03Z")
I would separate your cluster based on concerns. Keep development, testing & production in separate clusters for sure (you don’t want dev taking down prod). You can then namespace your workloads and implement a strict RBAC policy to maintain separation of concerns. The most important question is do you have the right tools and manpower to effectively manage multiple clusters? This should give you a better idea on feasibility of one or more clusters. ---
**Author:** ![stephenlawrence](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@stephenlawrence](https://discuss.kubernetes.io/u/stephenlawrence)\ **Post date:** [October 31, 2018, 6:49pm UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/5 "2018-10-31T18:49:06Z")
I just went through the process of justifying a switch from individual Azure Resource Group clusters for our two-product, 6 cluster, deployment to just two clusters: One PreProd and one Prod cluster. We use acs-engine so we pay for Master nodes, and Agentpool nodes. Each cluster has a minimum of 3 Masters and 3 Agentpools. For our pre-prod clusters they are underutilized. Even our prod are at times. Combining our 4-6 pre-prod clusters into a single multi-tenant cluster based on namespaces will save us a lot of VM costs, increase our utilization ratio, and decrease the administrative overhead for our devops staff. Another benefit is that you can apply things like Istio once, to the all the “clusters” and things like Spinnaker would benefit as well. ---
**Author:** ![Idan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/idan/32/2207_2.png) [@Idan](https://discuss.kubernetes.io/u/Idan)\ **Post date:** [November 1, 2018, 9:03am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/6 "2018-11-01T09:03:15Z")
**Update** : we went with one cluster and multiple namespaces, so far so good. It lets us manage all the services more easily with one ingress controller, centralized logs collection via fluentd, centralized monitoring with Prometheus, cluster policies, etc. so for now it looks like a good approach. **Clarification** : we have several production clusters in each geographical region, and we have separate clusters for development, staging, and production. ---
**Author:** ![amol](https://avatars.discourse-cdn.com/v4/letter/a/a4c791/32.png) [@amol](https://discuss.kubernetes.io/u/amol)\ **Post date:** [December 11, 2018, 9:03pm UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/7 "2018-12-11T21:03:41Z")
@Idan - we’re trying to implement a similar scheme for our GKE clusters: Clusters for environment separation; Namespaces for workload separation by team/ownership. Couple of questions to understand your experience with the setup you described: 1. How do you manage the access to different namespaces across the teams - do you use a shared service account per namespace or do you grant namespace access to individual user accounts via RoleBindings? 2. Do you pre-generate kubeconfig for each namespace? ---
**Author:** ![Idan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/idan/32/2207_2.png) [@Idan](https://discuss.kubernetes.io/u/Idan)\ **Post date:** [December 12, 2018, 7:48am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/8 "2018-12-12T07:48:06Z")
We are using the [Guard](https://github.com/appscode/guard) project to do AAD based authentication to the API server, so the kubeconfig we use has no credentials in it, the users authenticate with their personal AAD user. We then use RBAC to allow specific AAD groups with permissions to specific namespaces. ---
**Author:** ![prageethw](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/prageethw/32/2195_2.png) [@prageethw](https://discuss.kubernetes.io/u/prageethw)\ **Post date:** [February 6, 2019, 9:24am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/10 "2019-02-06T09:24:40Z")
Why you think that we can’t have one cluster with different namespaces to reflect environments (dev,test,prod) with proper RBAC + Autoscaling rather than having multiple clusters? what exact performance concerns or dragging down we were talking ? ---
**Author:** ![Idan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/idan/32/2207_2.png) [@Idan](https://discuss.kubernetes.io/u/Idan)\ **Post date:** [February 25, 2019, 8:28am UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/11 "2019-02-25T08:28:19Z")
We have two clusters per supported geo (for DR purposes), and all eng teams are deploying to the same clusters with different namespaces. Our SRE team is responsible for provisioning, configuring, monitoring and upgrading the clusters. They also responsible for the layers on top of K8s such as Prometheus, Log collection, Guard, PSPs, RBAC, etc. That said, we still **keep the dev clusters separate** , since it allows us to operate it differently in terms of: 1. Response to crisis / SLA - if dev cluster is down it’s not as urgent as production clusters 2. Access control and security - Isolated env, JIT, etc. 3. Stability - dev clusters tend to contain a lot of garbage and legacy stuff 4. Billing - it’s easier to divide the two 5. Upgrades - we can test K8s upgrades on a different environment than Prod - you cannot upgrade a specific namespace in K8s! Finally, if you are going to have several clusters for production, in our case we have 10 production clusters, then from COGs perspective, it doesn’t really matter if you have 10 or 11 clusters, I can understand why it’s more appealing when you only have one cluster. ---
**Author:** ![Turja\_Chaudhuri](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/turja_chaudhuri/32/9173_2.png) [@Turja\_Chaudhuri](https://discuss.kubernetes.io/u/Turja_Chaudhuri)\ **Post date:** [December 20, 2021, 5:05pm UTC](https://discuss.kubernetes.io/t/multiple-namespaces-vs-multiple-clusters/826/12 "2021-12-20T17:05:39Z")
Hi Idan/Team, Greetings!! Is there any guidance from CNCF / CSP(s) on this specific topic (namespace VS multi-cluster), kind of like a best practice recommendations and so on. What should be the specific use-case to choose one approach over another , limitations / advantages , etc ?