chore: excluded jobs and cronjobs

Signed-off-by: Ved Ratan <[email protected]>
nirmata · Aug 9, 2024 · 74387e8 · 74387e8
1 parent 459b449
commit 74387e8
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/charts/rbac-best-practices/pols/restrict-automount-sa-token.yaml b/charts/rbac-best-practices/pols/restrict-automount-sa-token.yaml
@@ -73,13 +73,31 @@ spec:
           - Pod
           selector:
             matchLabels:
-              batch.kubernetes.io/job-name: "kyverno-cleanup-admission-reports-*"   
+              job-name: "kyverno-cleanup-admission-reports-*"   
       - resources:
           kinds:
           - Pod
           selector:
             matchLabels:
-              batch.kubernetes.io/job-name=kyverno: "cleanup-cluster-admission-reports-*" 
+              job-name: "kyverno-cleanup-cluster-admission-reports-*" 
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              job-name: "kyverno-cleanup-ephemeral-reports-*" 
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              job-name: "kyverno-cleanup-cluster-ephemeral-reports-*" 
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              job-name: "kyverno-cleanup-update-requests-*" 
     preconditions:
       all:
       - key: "{{ request.\"object\".metadata.labels.\"app.kubernetes.io/part-of\" || '' }}"