kubernetes/staging/src/k8s.io/pod-security-admission/webhook/manifests/20-resourcequota.yaml

apiVersion: v1
kind: ResourceQuota
metadata:
  name: pod-security-webhook
  namespace: pod-security-webhook
spec:
  hard:
    pods: 3
  scopeSelector:
    matchExpressions:
    - operator: In
      scopeName: PriorityClass
      values:
      - system-cluster-critical