apiVersion: v1
kind: Namespace
metadata:
  name: dynamic-runner
  labels:
    # Disposable Pod runners may start dockerd or kind from the workflow.
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/audit: restricted
    pod-security.kubernetes.io/warn: restricted