clustertool/clusters/main/kubernetes/kube-system/namespace.yaml

apiVersion: v1
kind: Namespace
metadata:
    name: kube-system
    labels:
        pod-security.kubernetes.io/enforce: privileged
        topolvm.io/webhook: ignore