apiVersion: kyverno.io/v2alpha1
kind: CELPolicyException
metadata:
  name: pod-security-exception
  namespace: delta
spec:
  matchConditions:
    - name: "check-namespace"
      expression: "object.metadata.namespace == 'test-ns'"