clustertool/clusters/main/kubernetes/system/kyverno/app/namespace.yaml

apiVersion: v1
kind: Namespace
metadata:
    name: kyverno
    labels:
        kustomize.toolkit.fluxcd.io/prune: disabled
        goldilocks.fairwinds.com/enabled: "true"
        pod-security.kubernetes.io/enforce: privileged