---
apiVersion: v1
kind: Namespace
metadata:
  name: kyverno
  labels:
    # Pod Security Admission: Kyverno's own pods run privileged-sidecars/agent.
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/audit: privileged
    pod-security.kubernetes.io/warn: privileged