# What does the --no-cross-namespace-refs=true flag on the Flux controllers do?

Flux CD, Medium (Advanced), Security. https://k8wiz.com/uquiz/what-does-the-no-cross-namespace-refstrue-flag-on-the-flux-controllers-do

- A. Stops Flux from applying resources outside the Kustomization's namespace
- B. Hides Flux objects in other namespaces from the flux CLI
- C. Stops Flux objects from referring to sources or objects in other namespaces
- D. Blocks network traffic between pods in different namespaces

**Answer:** Stops Flux objects from referring to sources or objects in other namespaces

**Explanation:** Without the flag, a Kustomization in a tenant namespace can point at a GitRepository in another namespace. With it, references must stay in the object's own namespace, which is a key step in locking down a multi-tenant cluster.