this is my k8s-infra configuration，I only want to collect logs from cintainers pay-fpmsapi and pay-callback in namespace pms， but after apply this，still connect all containers logs in namespace pms， is there a problem in my configuration？

It's not AND logic. Please just list the container you want to collect logs from.

O. thanks