### Namespace

The Kubernetes `Namespace` is used to isolate infrastructure resources. That is:

* Resources in the same `Namespace` does not promise any isolation and tend to share as much as underlying resources as possible;
* Resources in different `Namespace` promise logical isolation, but the physical isolation level depends on the implementation details of different providers.
* Without special notice, resources in different `Namespace` cannot reference each other, e.g. a `Cluster` in NamespaceA cannot be placed into a `Network` in NamespaceB.

As a user, it is recommended for you to maintain a dedicated `Namespace` for each isolation unit (Organization, Project, etc.).