UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Commit 24fce76b authored by Dustin Hilgaertner's avatar Dustin Hilgaertner
Browse files

Tightened it up to only effect loki service accounts as the logging namespace...

Tightened it up to only effect loki service accounts as the logging namespace can contain other packages (possibly community packages)
parent 80a82117
No related branches found
No related tags found
1 merge request!3769Refactor Loki to use wildcards for Automount hardening on service accounts
Pipeline #2800229 passed
......@@ -720,6 +720,8 @@ policies:
# Enforcing said policies requires access to the API to get/list resources
- twistlock-defender-ds-*
- namespace: logging
serviceAccounts:
- logging-loki-*
pods:
allow:
- logging-loki-minio-ss-*
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment