apiVersion: kyverno.io/v2 kind: PolicyException metadata: name: delta-exception namespace: delta spec: exceptions: - policyName: disallow-host-namespaces ruleNames: - host-namespaces - autogen-host-namespaces match: any: - resources: kinds: - Pod - Deployment namespaces: - delta names: - important-tool*