opa gatekeeper v3.23.1
ModifySet.spec.match.namespaceSelector.matchExpressions[].values.spec.match.excludedNamespaces
ExcludedNamespaces is a list of namespace names. If defined, a constraint only applies to resources not in a listed namespace. ExcludedNamespaces also supports a prefix or suffix based glob. For example, `excludedNamespaces: [kube-*]` matches both `kube-system` and `kube-public`, and `excludedNamespaces: [*-system]` matches both `kube-system` and `gatekeeper-system`.
| Field / Type | Description |
|---|---|
ModifySet.spec.match.namespaceSelector.matchExpressions[].values.spec.match.excludedNamespaces | A string that supports globbing at its front and end. Ex: "kube-*" will match "kube-system" or "kube-public", "*-system" will match "kube-system" or "gatekeeper-system", "*system*" will match "system-kube" or "kube-system". The asterisk is required for wildcard matching.
|