monitoring update to 51.10.0-bb.2

Package Merge Request

Package Changes

Turned off automountServiceAccountToken for AlertManager because it was unnecessary. Also added exclusions for monitoring stack (automountserviceaccounttoken disallow policy)

Package MR

big-bang/product/packages/monitoring!234 (merged)

For Issue

Closes https://repo1.dso.mil/big-bang/product/packages/monitoring/-/issues/139

chart/templates/kyverno-policies/values.yaml

@@ -148,6 +148,44 @@ policies:
           names:
           - kyverno-reporter*
       {{- end }}
+      {{- if .Values.monitoring.enabled }}
+      - resources:
+          namespaces:
+          - monitoring
+          kinds:
+          - ServiceAccount
+          names:
+          - monitoring-monitoring-prometheus-node-exporter
+          - monitoring-monitoring-kube-operator
+          - monitoring-monitoring-kube-state-metrics
+          - monitoring-monitoring-kube-admission
+          - monitoring-monitoring-kube-prometheus
+      - resources:
+          namespaces:
+          - monitoring
+          kinds:
+          - Pod
+          - Deployment
+          names:
+          - prometheus-monitoring-monitoring-kube-prometheus*
+      {{- end }}
+      {{- if .Values.grafana.enabled }}
+      - resources:
+          namespaces:
+          - monitoring
+          kinds:
+          - ServiceAccount
+          names:
+          - monitoring-grafana
+      - resources:
+          namespaces:
+          - monitoring
+          kinds:
+          - Pod
+          - Deployment
+          names:
+          - monitoring-grafana*
+      {{- end }}
 
   {{- if or .Values.fluentbit.enabled .Values.monitoring.enabled .Values.twistlock.enabled }}
   disallow-tolerations: