private-tenant-operator. A Kubebuilder-based Kubernetes operator demonstrating multi-tenant namespace provisioning. Creates isolated namespaces with RBAC bindings, resource quotas, and ESO SecretStores wired to HashiCorp Vault for secrets management.