# Kubernetes Namespace with Resource Quotas and Network Policies
# Supports 4 deployment modes: solo, multiuser, cicd, enterprise
# Includes RBAC setup, resource limits, and network isolation
#
# Usage:
#   nickel eval --format json namespace.yaml.ncl | yq -P > namespace.yaml
#   kubectl apply -f namespace.yaml

{
  apiVersion = "v1",
  kind = "Namespace",
  metadata = {
    name = "provisioning",
    labels = {
      name = "provisioning",
      component = "provisioning-platform",
      "pod-security.kubernetes.io/enforce" = "baseline",
      "pod-security.kubernetes.io/audit" = "baseline",
      "pod-security.kubernetes.io/warn" = "baseline",
    },
    annotations = {
      description = "Provisioning platform services namespace",
    },
  },
}