Draft: 1749-automountServiceAccounts-istio: moving values from package to bb...
Status | Pipeline | Created by | Stages | |
---|---|---|---|---|
Failed 00:44:16
| Stage: 🎛 prevar Stage: 🔥 smoke tests |
Download artifacts
No artifacts found | ||
UNCLASSIFIED - NO CUI
Currently supported Big Bang Version is 2.51
This MR adds default kyverno-policy values for the new update-automountserviceaccounttokens
clusterpolicy
.
This clusterpolicy
This policy contains two rules, one that applies to the serviceaccount to disable automounting the token and another rule that applies to the pod that will override the serviceaccount setting because the pod truly needs access to the API.
(Describe Package changes here)
Closes
https://repo1.dso.mil/big-bang/product/packages/istio-operator/-/issues/56
https://repo1.dso.mil/big-bang/product/packages/istio-controlplane/-/issues/115
Closes #50 (closed)
Status | Pipeline | Created by | Stages | |
---|---|---|---|---|
Failed 00:44:16
| Stage: 🎛 prevar Stage: 🔥 smoke tests |
Download artifacts
No artifacts found | ||
2 |
UNCLASSIFIED - NO CUI