Discovery: Multi-tenant Infrastructure Isolation Architecture

[2witstudios]

Overview

Research the feasibility and implementation of creating isolated infrastructure per team/business.

Key Questions

1. Container orchestration: Kubernetes, Docker Swarm, or managed services (Fly.io, Render, Railway)?
2. Cost per tenant: What's the minimum viable stack cost?
3. Provisioning automation: How does a new signup trigger stack creation?
4. DNS/SSL: How do we handle team-{id}.pagespace.io routing?
5. Resource limits: CPU/memory/tiering per plan?

Deliverable

Architecture design document with cost estimates and implementation phases.

Current State

The control plane (apps/control-plane/) already handles tenant provisioning, lifecycle management, and per-tenant Docker projects. This discovery is about evolving from shared-database multi-tenancy to fully isolated infrastructure per tenant.

Related

• Enables: Full AI database access per tenant (Discovery: AI Sandbox with Full Database Access #773)
• Blocks: Data migration planning (Discovery: Data Migration from Shared to Isolated #774)