apiVersion: v1
kind: Namespace
metadata:
  name: ci
  labels:
    app.kubernetes.io/name: ci
    # DinD (Docker-in-Docker) requires privileged pods.
    pod-security.kubernetes.io/enforce: privileged