NAMESPACE POLICY NAME    ACTION SCOPE
default   allow-nothing  Allow  Namespace
default   allow-waypoint Allow  WorkloadSelector
