Agentic AI Reference Architecture

Infrastructure · Infrastructure resource

Cluster Namespace

Infrastructure resourceInfrastructureInfrastructurearc:ClusterNamespace

A logical isolation partition within a shared cluster that separates environments or tenants and scopes their policies and quotas.

Responsibility. Isolates co-located agent environments on shared infrastructure.

Also known as: Namespace, Outer sandbox layer, ai-sandbox namespace

hostsis constrained byis constrained byAgent Controller: hostsAgent ControllerPod Network Policy: is constrained byPod Network PolicyNamespace Resource Quota: is constrained byNamespace Resource Quota
Direct neighbourhood (hover for relationship types)

Relationships

hosts structural

is constrained by control

Classification

Patterns
Multi-tenant isolation
Technologies
Kubernetes namespaces
Quality attributes
Security (ISO/IEC 25010 | NIST AI RMF: secure and resilient)
Risks mitigated
Staging or experiments consuming production capacity

Sources

  1. Ch4.3: T. Nguyen, "Container Orchestration and Edge Deployment," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 4.3. ISBN: 9798244538229.
  2. Ch9.3: T. Nguyen, "Sandboxing and Transparency Foundations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.3. ISBN: 9798244538229.