Exclude resources by name

[dannycheung-rokt]

Describe the solution you'd like

When matching by namespace, we can exclude certain namespaces via the excludeNamespaces matcher.

There is no equivalent for excluding by name. e.g. excludeNames

This would be helpful for policies that match against cluster scoped resources.

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

Environment:

• Gatekeeper version:
• Kubernetes version: (use kubectl version):

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

[Ga13Ou]

This is a useful feature.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

[siddhurk07]

This would be a useful feature. Has this been implemented?

[ritazh]

Reopened in case more people want this feature and if any volunteers wants to help drive the design.

There is also labelSelectors that can be used. https://open-policy-agent.github.io/gatekeeper/website/docs/howto#the-match-field