before creating it. This avoids apiserver crashloops if a webhook rejects namespace creation when the apiserver is rebooted.