I am attempting to configure descheduler for virtual machines only by configuring namespace filtering (full KubeDescheduler definition attached).

namespaces:
  included:
    - virt-vms

I'm observing that pods from openshift-* namespaces are also being evicted despite the requested filter. Expecting only workloads from included namespace to be evicted. In addition, CRD suggests that all openshift-* namespaces are part of default exclusion.

Namespaces overrides included and excluded namespaces while keeping the default exclusion of all openshift-*, kube-system and hypershift namespaces.

Namespace exclusion is not being rendered in the cluster configmap.

Attached are KubeDescheduler yaml, rendered configmap and logs from descheduler pod showing evictions.

In addition to this, when VM evictions do take place, there is no audit record in the logs. It shows that 1 pod can be evicted but does not report which workload is moved.