MATIH Platform is in active MVP development. Documentation reflects current implementation status.
17. Kubernetes & Helm
Namespaces
Overview

Namespace Topology Overview

MATIH organizes its Kubernetes resources across seven namespaces, each with dedicated RBAC policies, resource quotas, network policies, and operational boundaries. This section details every namespace, the resources it contains, and the communication patterns between them.


Namespace Map

+------------------------------------------------------------------+
|                     Kubernetes Cluster                            |
|                                                                   |
|  +-----------------------+  +---------------------------+        |
|  | matih-control-plane   |  | matih-monitoring-         |        |
|  | IAM, Tenant, Config,  |  | control-plane             |        |
|  | Audit, Notification,  |  | Prometheus, ServiceMonitor|        |
|  | Billing, API Gateway  |  +---------------------------+        |
|  +-----------------------+                                       |
|                                                                   |
|  +-----------------------+  +---------------------------+        |
|  | matih-data-plane      |  | matih-monitoring-         |        |
|  | AI, BI, ML, Query,    |  | data-plane                |        |
|  | Catalog, Pipeline,    |  | Prometheus, ServiceMonitor|        |
|  | Data Infra (Kafka,    |  +---------------------------+        |
|  | PostgreSQL, Redis,    |                                       |
|  | Trino, Spark, etc.)   |  +---------------------------+        |
|  +-----------------------+  | matih-ingress             |        |
|                              | NGINX Ingress Controller  |        |
|  +-----------------------+  +---------------------------+        |
|  | matih-docs            |                                       |
|  | Documentation site    |  +---------------------------+        |
|  +-----------------------+  | tenant-{slug}             |        |
|                              | Per-tenant namespaces     |        |
|                              +---------------------------+        |
+------------------------------------------------------------------+

Namespace Summary

NamespacePurposeServicesResource Profile
matih-control-planePlatform management10 Java Spring Boot servicesCPU: 20, Memory: 40Gi
matih-data-planeData and AI workloads14 services + data infrastructureCPU: 160, Memory: 320Gi
matih-monitoring-control-planeControl plane observabilityPrometheus, ServiceMonitorsCPU: 4, Memory: 8Gi
matih-monitoring-data-planeData plane observabilityPrometheus, ServiceMonitorsCPU: 8, Memory: 16Gi
matih-ingressExternal traffic routingNGINX Ingress ControllerCPU: 4, Memory: 4Gi
matih-docsDocumentation hostingNextra docs siteCPU: 1, Memory: 1Gi
tenant-{slug}Per-tenant isolationTenant-specific workloadsVariable per tier

Section Contents

PageDescription
Control Planematih-control-plane namespace resources and configuration
Data Planematih-data-plane namespace resources and resource quotas
Tenant NamespacesPer-tenant namespace provisioning and isolation
MonitoringObservability namespaces and ServiceMonitor configuration
IngressNGINX Ingress Controller and traffic routing