# ------------------------------------------------------------------------------
# gateway namespace
# Platform-owned — all cluster ingress traffic flows through here
# ------------------------------------------------------------------------------
apiVersion: v1
kind: Namespace
metadata:
  name: gateway
  labels:
    # Allow privileged pods if needed by Cilium gateway components
    pod-security.kubernetes.io/enforce: baseline
    pod-security.kubernetes.io/warn: restricted