Allow NAC operations/functionalities to work on selected set of namespaces based on some criteria mechanism

[shubham-pampattiwar]

Criteria mechanism could be:

• Labels
• AllowList

[sseago]

Could this be done via RBAC rather than needing new CR fields, etc? i.e. only allow NAB/NAR create permissions for the users/namespaces that should allow NAC operations?