apiVersion: v1
kind: Namespace
metadata:
  name: awp-arc-system
  labels:
    app.kubernetes.io/part-of: awp
    awp.dev/trust-profile: control-plane
---
apiVersion: v1
kind: Namespace
metadata:
  name: awp-runners-untrusted
  labels:
    app.kubernetes.io/part-of: awp
    awp.dev/trust-profile: untrusted-general
---
apiVersion: v1
kind: Namespace
metadata:
  name: awp-runners-trusted
  labels:
    app.kubernetes.io/part-of: awp
    awp.dev/trust-profile: trusted-internal
---
apiVersion: v1
kind: Namespace
metadata:
  name: awp-runners-privileged
  labels:
    app.kubernetes.io/part-of: awp
    awp.dev/trust-profile: privileged-build
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-ingress
  namespace: awp-runners-untrusted
spec:
  podSelector: {}
  policyTypes: [Ingress]
  ingress: []
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-ingress
  namespace: awp-runners-trusted
spec:
  podSelector: {}
  policyTypes: [Ingress]
  ingress: []
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-ingress
  namespace: awp-runners-privileged
spec:
  podSelector: {}
  policyTypes: [Ingress]
  ingress: []
