# Headlamp — apply before Helm. # Chart pods do not satisfy PSA "restricted" (see install warnings); align with other UIs. apiVersion: v1 kind: Namespace metadata: name: headlamp labels: pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/warn: privileged