Merge pull request #1837 from carlosrodfern/main

fix(core): ensure only cluster policy is updated on new ns
kubearmor · Aug 16, 2024 · 5c70d14 · 5c70d14
2 parents 7e7b1c3 + dd1f03d
commit 5c70d14
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/KubeArmor/core/kubeUpdate.go b/KubeArmor/core/kubeUpdate.go
@@ -960,6 +960,11 @@ func (dm *KubeArmorDaemon) WatchK8sPods() {
 }
 
 func matchClusterSecurityPolicyRule(policy tp.SecurityPolicy) bool {
+
+	if len(policy.Spec.Selector.Identities) > 0 { // if is not a Cluster policy
+		return false
+	}
+
 	hasInOperator := false
 	excludedNamespaces := make(map[string]bool)