From d5383fe218d59b0b021f7afa0dea44a9e5362cc4 Mon Sep 17 00:00:00 2001
From: danielgrunbergerarmo <danielg@armosec.io>
Date: Wed, 18 Aug 2021 14:04:00 +0300
Subject: [PATCH] fix field selector for non-namespaced resources

---
 policyhandler/k8sresources.go | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/policyhandler/k8sresources.go b/policyhandler/k8sresources.go
index e9d256ee..31de93ea 100644
--- a/policyhandler/k8sresources.go
+++ b/policyhandler/k8sresources.go
@@ -60,7 +60,7 @@ func (policyHandler *PolicyHandler) pullSingleResource(resource *schema.GroupVer
 
 	// set labels
 	listOptions := metav1.ListOptions{}
-	if excludedNamespaces != "" {
+	if excludedNamespaces != "" && k8sinterface.IsNamespaceScope(resource.Group, resource.Resource) {
 		excludedNamespacesSlice := strings.Split(excludedNamespaces, ",")
 		for _, excludedNamespace := range excludedNamespacesSlice {
 			listOptions.FieldSelector += "metadata.namespace!=" + excludedNamespace + ","
@@ -73,7 +73,6 @@ func (policyHandler *PolicyHandler) pullSingleResource(resource *schema.GroupVer
 
 	// set dynamic object
 	var clientResource dynamic.ResourceInterface
-
 	if namespace != "" && k8sinterface.IsNamespaceScope(resource.Group, resource.Resource) {
 		clientResource = policyHandler.k8s.DynamicClient.Resource(*resource).Namespace(namespace)
 	} else {