[v16] [kube] fix greedy deny rule blocking namespace list when blocking other resources#44974