Neuvector: disabled automountserviceaccounttoken in the neuvector namespace

chart/templates/kyverno-policies/values.yaml

@@ -699,7 +699,8 @@ policies:
       - velero
       - kyverno
       - velero
-
+      - neuvector
+      
   update-automountserviceaccounttokens:
     enabled: true
     namespaces:
@@ -766,6 +767,20 @@ policies:
         - velero-velero-*
         - node-agent-*
         - velero-label-namespace-*
+      - namespace: neuvector
+        serviceAccounts:
+        - basic
+        - controller
+        - enforcer
+        - updater
+        pods:
+        - neuvector-manager-pod-*
+        - neuvector-scanner-pod-*
+        - neuvector-controller-pod-*
+        - neuvector-enforcer-pod-*
+        - neuvector-updater-pod-*
+        - neuvector-prometheus-exporter-pod-*
+        - neuvector-registry-adapter-pod-*
 
 
 istio: