Refactor Twistlock ServiceAccount hardening to use wildcard

8bfcf573 · Justen Mehl · Michael Martin · e52cc620 · 8bfcf573
Commit 8bfcf573 authored 1 year ago by Justen Mehl Committed by Michael Martin 1 year ago
--- a/chart/templates/kyverno-policies/values.yaml
+++ b/chart/templates/kyverno-policies/values.yaml
@@ -713,11 +713,6 @@ policies:
        - istiod-*
        - istio-operator-*
      - namespace: twistlock
-        serviceAccounts:
-        - twistlock-console
-        - twistlock-init
-        - volume-upgrade-svc-acct
-        - twistlock-service
        pods:
        # twistlock-init pods require get/list/patch/etc to several resources. 
        # More details in twistlock/chart/templates/init/clusterrole.yaml