Refactor Loki to use wildcards for Automount hardening on service accounts

26789b6a · Dustin Hilgaertner · Michael Martin · 6753fec9 · 26789b6a
Commit 26789b6a authored 1 year ago by Dustin Hilgaertner Committed by Michael Martin 1 year ago
--- a/chart/templates/kyverno-policies/values.yaml
+++ b/chart/templates/kyverno-policies/values.yaml
@@ -721,7 +721,7 @@ policies:
          - twistlock-defender-ds-*
      - namespace: logging
        serviceAccounts:
-        - logging-loki-minio-sa
+          - logging-loki-*
        pods:
          allow:
          - logging-loki-minio-ss-*