Refactor earlier mutator implementations to use wildcard methodology - Istio Operator
- Jan 26, 2024
-
-
Chris Harden authored
Signed-off-by:
Chris Harden <chris@defenseunicorns.com>
-
UNCLASSIFIED - NO CUI
Currently supported Big Bang Version is 2.51
Omits the serviceAccounts
list in Istio Operator automountServiceAccountToken hardening, allowing the mutator to target all SAs via wildcard. This is more robust and better accommodates upstream changes over time.
At the moment, however, this is a simple refactor and there is no change to the original hardening.
(Link to Package MR here)
Closes (link to issue here)
https://repo1.dso.mil/big-bang/bigbang/-/issues/1898
N/A
Signed-off-by:
Chris Harden <chris@defenseunicorns.com>
UNCLASSIFIED - NO CUI