Multi-Tenancy

• Fleet rollout

  Roll one version across a fleet of StageSets in ordered waves — canary a few tenants, soak, health-check, then widen, and halt the whole fleet on regression.

• Security & multi-tenancy

  Run the controller safely — SOPS decryption, tenant impersonation, remote clusters, admission validation, network policy, and service mesh.