-
Bug
-
Resolution: Duplicate
-
Critical
-
None
-
None
-
None
Description:
When we set
auditFromCache=Automatic and constraint has only
namespace selector not "namespace" array in match
it collects resources under all namespaces
Solution:
When namespaceSelector is presented in constraint. Add "namespace" sync in Config
Reproduce:
spec.audit.autoFromCache=Automatic in Gatekeeper CR add [^constraint.yaml]