{{- if and (ne .Values.NAMESPACE "default") (ne .Values.NAMESPACE_DISABLED "yes") }}
apiVersion: v1
kind: Namespace
metadata:
  name: "{{ .Values.NAMESPACE }}"
  namespace: "{{ .Values.NAMESPACE }}"
  {{- if eq (.Values.RPSS_ENABLED | default "no") "yes" }}
  labels:
    pod-security.kubernetes.io/enforce: restricted
  {{- end }}
{{- end }}