add policy 020 / restrict-sa-automount-sa-token

  • added CEL-Rule for Restrict Auto-Mount of Service Account Tokens in Service Account
  • check PodSpec for automountServiceAccountToken set to false
  • created added tests for kyverno
  • used upstream tests for chainsaw testing only serviceaccount

Merge request reports

Loading