spec.match

apiVersion: config.gatekeeper.sh/v1alpha1
kind: Config
metadata:
  name: config
  namespace: "${NAMESPACE}"
spec:
  match:
    - excludedNamespaces: ["kube-*", "cattle-*", "aqua"]
      processes: ["*"]

Gatekeeper, installation, XProtect, OPA, gatekeeper.sh, config.gatekeeper.sh, gatekeeper-webhook-service