By design, ModRules are namespaced in order to allow namespace isolation for the purposes of running in multi-tenant environments. A ModRule only applies to resources in the same namespace where the ModRule is deployed.

This issue calls for the introduction of the following support for non-namespaced resources:
When a ModRule is deployed to namespace kubemod-system, that ModRule applies to non-namespaced resources such as namespaces, cluster roles, etc.

See discussion #40.