Added policy: deny-default-service-accounts
Description
For an enhnaced security posture, it is recommended to use specific service accounts and not the default service accounts. These service accounts provide an identity for processes that run in individual Pods and map them to a ServiceAccount object. This policy flags the Pods that use any default service accounts.
Checklist
-
I have read the policy contribution guidelines. -
I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended. -
I have added the artifacthub-pkg.yml file and have verified it is complete and correct.