Multi-namespace Kubernetes architecture on Azure AKS with NGINX Ingress, WAF NetworkPolicy, and horizontal pod autoscaling across availability zones. Traffic flows from users through an Azure LoadBalancer to the NGINX Ingress Controller, which routes requests to web-frontend pods managed by HPA and distributed across AZ-1 and AZ-2 nodes. ConfigMaps and Secrets inject configuration and credentials into pods, while RBAC via ServiceAccount and RoleBinding enforce least-privilege access. Backend PostgreSQL StatefulSet persists data via PVC to Azure managed storage with SSD StorageClass, with the Control Plane API Server and etcd maintaining cluster state. This architecture demonstrates production-grade security, scalability, and data persistence patterns for containerized web applications on Kubernetes.