 handling requests coming from resources which are not associated with any revision. In a fully scoped environment where every control plane is associated with its resources through proper namespace labeling, there is no need for these default webhook configurations. They should never be invoked.</p></li></ol><h3 id=deploy-application-workloads-per-usergroup>Deploy application workloads per usergroup</h3><ol><li><p>Create three application namespaces:</p><pre><code class=language-bash data-expandlinks=true 