UNCLASSIFIED - NO CUI

Skip to content

Exclude default SA from serviceaccount mutation - 2398

Chris Harden requested to merge 2398-automountSA-exclude-default-sa into main

General MR

Summary

Exclude default SA from serviceaccount mutation in update-automountserviceaccounttokens clusterpolicy. This will allow us to wildcard all SAs in the namespace while letting the pre-existing default SA be mutated differently with the update-automountserviceaccounttokens-default clusterpolicy

Epic: P1BIGROCKS-2398 Issue: Exclude default SA from update-automountserviceaccounttokens serviceaccount mutation

Relevant logs/screenshots

(Include any relevant logs/screenshots)

Edited by Chris Harden

Merge request reports