# CUST-WP-0073: explicit ESO target metadata verified before re-enabling.
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding
metadata:
  name: reject-secret-last-applied
spec:
  policyName: reject-secret-last-applied
  validationActions: [Deny]