apiVersion: v1
kind: Namespace
metadata:
  name: security-audit
  labels:
    # hostPath (/var/log/audit, чекпоинты) запрещён профилем baseline — нужен privileged.
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/warn: baseline
    pod-security.kubernetes.io/audit: baseline
    istio-injection: disabled