fix(security): prevent ESO copying source annotations (CUST-WP-0073)
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 5s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
tegwick 2026-09-28 15:56:50 +02:00
parent 3e42ca8ffb
commit f0dff91eb5

View file

@ -13,6 +13,9 @@ spec:
kind: ClusterSecretStore kind: ClusterSecretStore
name: openbao-audit-core name: openbao-audit-core
target: target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata: {}
name: audit-core-senders name: audit-core-senders
creationPolicy: Owner creationPolicy: Owner
deletionPolicy: Retain deletionPolicy: Retain