Refactor earlier mutator implementations to use wildcard methodology - Velero

Package Merge Request

Package Changes

Omits the serviceAccounts list in Kiali automountServiceAccountToken hardening, allowing the mutator to target all SAs via wildcard. This is more robust and better accommodates upstream changes over time.

At the moment, however, this is a simple refactor and there is no change to the original hardening.

Package MR

(Link to Package MR here)

For Issue

Closes https://repo1.dso.mil/big-bang/bigbang/-/issues/1901

Upgrade Notices

(Include any relevant notes about upgrades here or write "N/A" if there are none)

chart/templates/kyverno-policies/values.yaml

@@ -755,10 +755,6 @@ policies:
           - kyverno-admission-controller-*
           - kyverno-cleanup-cluster-admission-reports-*
       - namespace: velero
-        serviceAccounts:
-        - velero
-        - velero-upgrade-crds
-        - velero-velero-server
         pods:
           allow:
           - velero-cleanup-crds-*