Namespace Requirements

Creating a namespace with kubectl

There are no special requirements for namespaces created with kubectl at this time. You can create a namespace using the following command:

kubectl create namespace <namespace-name>

Creating a namespace via the Alauda Container Platform web console

When creating a namespace from the Alauda Container Platform Projects → Namespace page, you must set the Pod Security Admission setting to a mode that the injected sidecar satisfies:

  • If the Istio resource sets spec.values.global.proxy.seccompProfile.type to RuntimeDefault, you can leave the Enforce security mode set to Restricted.
  • Otherwise, the Enforce security mode must not be set to Restricted; it is recommended to change it to Baseline.

For more information, see Pod Security Admission.