diff --git a/cmd/initContainer/main.go b/cmd/initContainer/main.go
index ba07577665..f239ec7cbd 100644
--- a/cmd/initContainer/main.go
+++ b/cmd/initContainer/main.go
@@ -62,7 +62,7 @@ func main() {
 	// Exit for unsupported version of kubernetes cluster
 	// https://github.com/nirmata/kyverno/issues/700
 	// - supported from v1.12.7+
-	if !utils.CompareKubernetesVersion(client, log.Log, 1, 12, 7) {
+	if !utils.HigherThanKubernetesVersion(client, log.Log, 1, 12, 7) {
 		os.Exit(1)
 	}
 
diff --git a/pkg/engine/utils.go b/pkg/engine/utils.go
index f5a1ab4c1b..4f2f7badec 100644
--- a/pkg/engine/utils.go
+++ b/pkg/engine/utils.go
@@ -115,6 +115,7 @@ func matchSubjects(ruleSubjects []rbacv1.Subject, userInfo authenticationv1.User
 
 	userGroups := append(userInfo.Groups, userInfo.Username)
 
+	// TODO: see issue https://github.com/nirmata/kyverno/issues/861
 	ruleSubjects = append(ruleSubjects,
 		rbacv1.Subject{Kind: "Group", Name: "system:serviceaccounts:kube-system"},
 		rbacv1.Subject{Kind: "Group", Name: "system:nodes"},