Until this point, the homepage about the multi-tenant cluster was running in the multi-tenant cluster without using the multi-tenant functionality :-P. Now, I have created a “homepage” tenant, with a non-cluster-admin user (myself) as the owner. As this user I have created a homepage namespace and a “deployer” service account, that only has access to the homepage namespace. The kubeconfig of this deployer serviceaccount is used in the Gitlab pipeline.