railiance-platform/argocd/platform-addons/secret-annotation-guard/binding.yaml

9 lines
277 B
YAML
Raw Normal View History

# CUST-WP-0073: explicit ESO target metadata verified before re-enabling.
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding
metadata:
name: reject-secret-last-applied
spec:
policyName: reject-secret-last-applied
validationActions: [Deny]