feat(security): reject secret last-applied annotations (CUST-WP-0073)

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
codex 2026-09-28 14:51:25 +02:00
parent 7a12760160
commit 800cbfa870
5 changed files with 141 additions and 0 deletions

View file

@ -29,6 +29,10 @@ spec:
kind: ClusterRoleBinding
- group: external-secrets.io
kind: ClusterSecretStore
- group: admissionregistration.k8s.io
kind: ValidatingAdmissionPolicy
- group: admissionregistration.k8s.io
kind: ValidatingAdmissionPolicyBinding
namespaceResourceWhitelist:
- group: ""
kind: ConfigMap