feat: network separtion by namespaces

deploy-namespace-separation.yaml

@@ -0,0 +1,51 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: namespace-a
+  labels:
+    team: a
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: namespace-b
+  labels:
+    team: b
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: k8s-security-demo
+  namespace: namespace-a
+  labels:
+    app: k8s-security-demo
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: k8s-security-demo
+  template:
+    metadata:
+      labels:
+        app: k8s-security-demo
+    spec:
+      containers:
+      - name: hello
+        image: ironcore864/k8s-security-demo:pod-as-non-root
+        ports:
+          - containerPort: 8080
+        securityContext:
+          runAsNonRoot: True
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: k8s-security-demo
+  namespace: namespace-a
+spec:
+  selector:
+    app: k8s-security-demo
+  ports:
+    - port: 80
+      targetPort: 8080

testpod-namespace-separation.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: testpod
+  namespace: namespace-b
+spec:
+  containers:
+  - name: curl
+    image: curlimages/curl 
+    command: [ "sleep", "600" ]