add ServiceAccount to the subject in annotations

Signed-off-by: Chandan-DK <[email protected]>
kyverno · Mar 26, 2024 · 2f00bff · 2f00bff
1 parent 107816e
commit 2f00bff
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml b/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml
@@ -26,6 +26,6 @@ readme: |
 annotations:
   kyverno/category: "Security in CEL"
   kyverno/kubernetesVersion: "1.26-1.27"
-  kyverno/subject: "Secret"
-digest: 7fa15f20634f82aa6de4f5c10c449a2ef43919979671323ed571f0ce233ccefa
+  kyverno/subject: "Secret, ServiceAccount"
+digest: 16324f38031f70d4a971bde9673ca51e70455478b832a005cbb415ee901f5e56
 createdAt: "2024-03-22T07:40:19Z"
diff --git a/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml b/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml
@@ -8,7 +8,7 @@ metadata:
     kyverno.io/kubernetes-version: "1.26-1.27"
     kyverno.io/kyverno-version: 1.11.0
     policies.kyverno.io/severity: medium
-    policies.kyverno.io/subject: Secret
+    policies.kyverno.io/subject: Secret, ServiceAccount
     policies.kyverno.io/description: >-
       Before version 1.24, Kubernetes automatically generated Secret-based tokens 
       for ServiceAccounts. When creating a Secret, you can specify its type using the 

diff --git a/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml b/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml
@@ -26,5 +26,5 @@ readme: |
 annotations:
   kyverno/category: "Security"
   kyverno/kubernetesVersion: "1.27"
-  kyverno/subject: "Secret"
+  kyverno/subject: "Secret, ServiceAccount"
 digest: 106c14ef2f33f3426e8bceaa47f696c7a9a10262955862f680497f3daa34c545
diff --git a/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml b/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml
@@ -8,7 +8,7 @@ metadata:
     kyverno.io/kubernetes-version: "1.27"
     kyverno.io/kyverno-version: 1.11.1
     policies.kyverno.io/severity: medium
-    policies.kyverno.io/subject: Secret
+    policies.kyverno.io/subject: Secret, ServiceAccount
     policies.kyverno.io/description: >-
       Before version 1.24, Kubernetes automatically generated Secret-based tokens 
       for ServiceAccounts. When creating a Secret, you can specify its type using the