Securing Projects CI/CD

I’m trying to find a way to segment projects in the same cluster. I’m having a hard time finding specific documentation, if you cant point it out that would be great.

I’m thinking, I either create multiple contexts and/or multiple projects and/or multiple groups within a project create them and add separate enviornment variables.

If anyone can advise me on the most secure path, on the same cluster. that would be greatly appreciated.