Exclude kube system from OPA

Related to #66 Related to #82 Related to #107 (closed)

chart/templates/config/config.yaml

@@ -6,6 +6,9 @@ metadata:
   labels:
     {{- include "gatekeeper.labels" . | nindent 4 }}
 spec:
+  match:
+    - excludedNamespaces: ["kube-system", "{{ .Release.Namespace }}"]
+      processes: ["*"]
   sync:
     syncOnly:
       - group: "extensions"