ValidatingAdmissionPolicyList.items.spec.matchConstraints.excludeResourceRules.apiGroups

APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.