chore: chart version bump

Signed-off-by: Ved Ratan <[email protected]>
nirmata · Aug 9, 2024 · 459b449 · 459b449
1 parent f2bcb8b
commit 459b449
Show file tree

Hide file tree

Showing 3 changed files with 58 additions and 58 deletions.
diff --git a/charts/rbac-best-practices/Chart.yaml b/charts/rbac-best-practices/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: rbac-best-practice-policies
 description: Rbac Best Practice policy set
 type: application
-version: 0.2.0
+version: 0.2.1
 appVersion: 0.1.0
 keywords:
   - kubernetes

diff --git a/charts/rbac-best-practices/pols/restrict-automount-sa-token.yaml b/charts/rbac-best-practices/pols/restrict-automount-sa-token.yaml
@@ -24,6 +24,62 @@ spec:
       - resources:
           kinds:
           - Pod
+    exclude:
+      any:
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app: nirmata-kube-controller
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app: otel-agent
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/name: nirmata-kyverno-operator
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: admission-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: cleanup-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: background-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: reports-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              batch.kubernetes.io/job-name: "kyverno-cleanup-admission-reports-*"   
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              batch.kubernetes.io/job-name=kyverno: "cleanup-cluster-admission-reports-*" 
     preconditions:
       all:
       - key: "{{ request.\"object\".metadata.labels.\"app.kubernetes.io/part-of\" || '' }}"

diff --git a/rbac-best-practices/restrict-automount-sa-token/restrict-automount-sa-token.yaml b/rbac-best-practices/restrict-automount-sa-token/restrict-automount-sa-token.yaml
@@ -24,62 +24,6 @@ spec:
       - resources:
           kinds:
           - Pod
-    exclude:
-      any:
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app: nirmata-kube-controller
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app: otel-agent
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/name: nirmata-kyverno-operator
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: admission-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: cleanup-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: background-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: reports-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              batch.kubernetes.io/job-name: "kyverno-cleanup-admission-reports-*"   
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              batch.kubernetes.io/job-name=kyverno: "cleanup-cluster-admission-reports-*" 
     preconditions:
       all:
       - key: "{{ request.\"object\".metadata.labels.\"app.kubernetes.io/part-of\" || '' }}"
@@ -89,4 +33,4 @@ spec:
       message: "Auto-mounting of Service Account tokens is not allowed."
       pattern:
         spec:
-          automountServiceAccountToken: "false"
+          automountServiceAccountToken: "false"