apiVersion: v1 kind: Namespace metadata: name: good labels: pod-security.kubernetes.io/enforce: restricted pod-security.kubernetes.io/warn: restricted