Description:
When we set
auditFromCache=Automatic and constraint has only
namespace selector not "namespace" array in match
 
it collects resources under all namespaces
 
 
Solution:
When namespaceSelector is presented in constraint. Add "namespace" sync in Config
 
Reproduce: 
spec.audit.autoFromCache=Automatic  in Gatekeeper CR add [^constraint.yaml]