<p>We provide kubernetes cluster for many users, the separation between applications by namespace.</p>

<p>For deploy use kubernetes-helm. There are situations when we need to close the opportunity to deploy the app in the cluster. One option is to change permissions for default sa (which the use kubernetes-helm).</p>

<p>How else can solve?</p>

<p>You'd use an <a href="https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/" rel="nofollow noreferrer">admission controller</a>.</p>

<p>Unfortunately, this might involve writing some code to manage it. There are tools out there that help, like <a href="https://www.openpolicyagent.org/docs/kubernetes-admission-control.html" rel="nofollow noreferrer">Open Policy Agent</a></p>
