# Namespace fixtures. `app-ns` carries the application-namespace marker so the
# namespaceSelector-scoped policies apply; `platform-ns` does not, proving that
# platform/system namespaces are correctly OUT of scope.
apiVersion: v1
kind: Namespace
metadata:
  name: app-ns
  labels:
    homelab.keithjackson.dev/app-namespace: "true"
---
apiVersion: v1
kind: Namespace
metadata:
  name: platform-ns
  labels:
    kubernetes.io/metadata.name: platform-ns