diff --git a/KubeArmor/core/kubeUpdate.go b/KubeArmor/core/kubeUpdate.go index 082b029acb..1d7ebb0d42 100644 --- a/KubeArmor/core/kubeUpdate.go +++ b/KubeArmor/core/kubeUpdate.go @@ -960,6 +960,11 @@ func (dm *KubeArmorDaemon) WatchK8sPods() { } func matchClusterSecurityPolicyRule(policy tp.SecurityPolicy) bool { + + if len(policy.Spec.Selector.Identities) > 0 { // if is not a Cluster policy + return false + } + hasInOperator := false excludedNamespaces := make(map[string]bool)