apiVersion: v1
kind: Namespace
metadata:
  name: obsidian
  labels:
    # The sync pod is fully compliant with the "restricted" Pod Security Standard.
    pod-security.kubernetes.io/enforce: restricted
  annotations:
    argocd.argoproj.io/sync-wave: "-1"