diff --git a/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml b/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml index 54d22db56..79870e861 100644 --- a/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml +++ b/other-cel/deny-secret-service-account-token-type/artifacthub-pkg.yaml @@ -26,6 +26,6 @@ readme: | annotations: kyverno/category: "Security in CEL" kyverno/kubernetesVersion: "1.26-1.27" - kyverno/subject: "Secret" -digest: 7fa15f20634f82aa6de4f5c10c449a2ef43919979671323ed571f0ce233ccefa + kyverno/subject: "Secret, ServiceAccount" +digest: 16324f38031f70d4a971bde9673ca51e70455478b832a005cbb415ee901f5e56 createdAt: "2024-03-22T07:40:19Z" \ No newline at end of file diff --git a/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml b/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml index b51df4a0d..fbd371e1f 100644 --- a/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml +++ b/other-cel/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml @@ -8,7 +8,7 @@ metadata: kyverno.io/kubernetes-version: "1.26-1.27" kyverno.io/kyverno-version: 1.11.0 policies.kyverno.io/severity: medium - policies.kyverno.io/subject: Secret + policies.kyverno.io/subject: Secret, ServiceAccount policies.kyverno.io/description: >- Before version 1.24, Kubernetes automatically generated Secret-based tokens for ServiceAccounts. When creating a Secret, you can specify its type using the diff --git a/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml b/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml index 1f9bc88b9..4e619235d 100644 --- a/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml +++ b/other/deny-secret-service-account-token-type/artifacthub-pkg.yaml @@ -26,5 +26,5 @@ readme: | annotations: kyverno/category: "Security" kyverno/kubernetesVersion: "1.27" - kyverno/subject: "Secret" + kyverno/subject: "Secret, ServiceAccount" digest: 106c14ef2f33f3426e8bceaa47f696c7a9a10262955862f680497f3daa34c545 diff --git a/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml b/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml index 69059b7be..899f0aef0 100644 --- a/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml +++ b/other/deny-secret-service-account-token-type/deny-secret-service-account-token-type.yaml @@ -8,7 +8,7 @@ metadata: kyverno.io/kubernetes-version: "1.27" kyverno.io/kyverno-version: 1.11.1 policies.kyverno.io/severity: medium - policies.kyverno.io/subject: Secret + policies.kyverno.io/subject: Secret, ServiceAccount policies.kyverno.io/description: >- Before version 1.24, Kubernetes automatically generated Secret-based tokens for ServiceAccounts. When creating a Secret, you can specify its type using the