apiVersion: constraints.gatekeeper.sh/v1beta1
kind: CSCIngressConstraint
metadata:
  name: cscingressconstraint
spec:
  match:
    kinds:
    - apiGroups: ["networking.k8s.io"]
      kinds: ["Ingress"]
    namespaces: ["csc-*"]