What's the story of multitenancy in Kubernetes? Is it true that it does not provide sufficient isolation between services by default? Is this something that could be handled by configuration only or is it a bigger issue with Kubernetes design?

What's the best way to make Kubernetes the layer that isolates tenants in a multitenant platform?