yeah that's pretty much what I did

it's at the top-level ns / dir so you don't have to have a manifest file for every nested namespace your pod exposes