Nexus: disabled automountserviceaccounttoken in the Nexus namespace

Package Merge Request

Package Changes

Adding disable-automount settings for Nexus to Kyverno-policy

Issue: 1849

Epic: Disable automatic mounting of service account tokens

Package MR

(Link to Package MR here)

For Issue

Closes (link to issue here)

chart/templates/kyverno-policies/values.yaml

@@ -708,6 +708,7 @@ policies:
       - promtail
       - fluentbit
       - eck-operator
+      - nexus-repository-manager
       
   update-automountserviceaccounttokens:
     enabled: true
@@ -871,6 +872,13 @@ policies:
         - elastic-operator
         pods:
         - elastic-operator-?
+      - namespace: nexus-repository-manager
+        serviceAccounts:
+        - nexus-repository-manager
+        pods:
+        - nexus-repository-manager-* 
+
+
 
 istio:
   enabled: {{ .Values.istio.enabled }}