Mitigating the automount service account token findings for Thanos

General MR

Summary

Mitigating the automount service account token findings for Thanos

Related to https://repo1.dso.mil/big-bang/bigbang/-/issues/1859

added grafana kindenhancement monitoring priority7 statusdoing thanos labels

assigned to @dhilgaertner2

added 17 commits

• f106e335...e3eda0db - 16 commits from branch master
• 330c6962 - mitigating the automount service account token findings

Compare with previous version

added 21 commits

• 330c6962...807ac418 - 20 commits from branch master
• c2aa531b - mitigating the automount service account token findings

Compare with previous version

added 1 commit

• 2bd4f176 - hardened pods

Compare with previous version

added 1 commit

• 127f450e - hardened pods

Compare with previous version

This is done but needs this merged first: big-bang/product/packages/kyverno-policies!121 (merged)

added 43 commits

• 127f450e...fde5cd8b - 40 commits from branch master
• 0c7efdbd - mitigating the automount service account token findings
• 3704f032 - hardened pods
• 25bddabd - hardened pods

Compare with previous version

marked this merge request as ready

added statusreview label and removed statusdoing label

Ready for review

requested review from @ryan.j.garcia, @ryan.thompson.44, @chris.oconnell, and @michaelmartin

approved this merge request

changed milestone to %2.19.0

merged

mentioned in commit f5bbde9e

mentioned in merge request big-bang/customers/template!70 (merged)