shuting

> Yes, that's what I want. I want my policy to match only namespace owners users but not other service accounts like fluxcd for example. Is your namespace owner defined...

@iusergii - thanks for the PR. I wonder if this fixes the issue, checking the code, and looks like it needs multiple envs to be set: https://github.com/kyverno/kyverno/blob/4a7119da8cf7ea81b1c10d0314d68b23652f014a/cmd/internal/check.go#L11-L16

> Hi @realshuting! It seems this slipped through the cracks, I apologize for the delay responding! > > Would you like to present on September 11 at 10PT? Sounds great,...

cc @sivasathyaseeelan

This is configurable via: ``` $ k explain cpol.spec.admission KIND: ClusterPolicy VERSION: kyverno.io/v1 FIELD: admission DESCRIPTION: Admission controls if rules are applied during admission. Optional. Default value is "true". ```

CLI tests failed, @bakunowski - can you please take a look?

> > CLI tests failed, @bakunowski - can you please take a look? > > Thanks both for taking a look. I've run the tests in the policies repo locally...

> Sorry if I'm confused here, but from what I can see these CLI tests are run _against_ the policies repo: https://github.com/bakunowski/kyverno/blob/dec6b8ec6c64ca6ddeb54efa5ce6b4c95299662a/Makefile#L846 Yes, this change broke existing tests in kyverno/policies....

> > Sorry if I'm confused here, but from what I can see these CLI tests are run _against_ the policies repo: https://github.com/bakunowski/kyverno/blob/dec6b8ec6c64ca6ddeb54efa5ce6b4c95299662a/Makefile#L846 > > Yes, this change broke existing...

Hi @bakunowski - sorry for the late response! Can you please resolve conflicts?