Fix kyverno exemption and mutation for automount service token

General MR

Summary

This MR accomplishes two things:

• Fixes a bug where setting serviceAccounts to be mutated and hardened as it pertains to automountServiceAccountToken settings, inadvertently exempted underlying pods from being scrutinized by this policy.
• Adds a new mutator that can be used to harden automountServiceAccountToken (set to false) on Pods; to be used in situations where upstream sets the pods to be explicitly TRUE in this regard unnecessarily.

Relates to https://repo1.dso.mil/big-bang/bigbang/-/issues/1835

added statusreview label

mentioned in merge request big-bang/bigbang!3487 (merged)

added 1 commit

• 3422c9b2 - readme/changelog/version

Compare with previous version

removed statusreview label

added statusdoing label

assigned to @dhilgaertner2

added kyverno kyvernoPolicies labels

removed kyverno label

removed kyvernoPolicies label

changed the description

added 1 commit

• dab0e224 - adding test values

Compare with previous version

removed statusdoing label

added statusreview label

requested review from @enochofori777, @snaq11092, @meganwolf, @bkhamitov, @nnewc, and @massey.robert

marked this merge request as ready

added kindenhancement label

added kindbug label and removed kindenhancement label

marked this merge request as draft

added statusdoing label and removed statusreview label

Pulling this out of review because I found another bug that needs to be addressed.

added 1 commit

• 3ea055f3 - conditionals to avoid null errors

Compare with previous version

marked this merge request as ready

added statusreview label and removed statusdoing label

Ok this is ready for review

mentioned in merge request big-bang/bigbang!3600 (merged)

approved this merge request

merged

mentioned in commit b4aa9228

mentioned in merge request big-bang/bigbang!3633 (merged)