railiance-platform/argocd/platform-addons/secret-annotation-guard/binding.pending.yaml
codex 6016f72a8d fix(security): hold annotation enforcement until ESO metadata is explicit
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
2026-09-28 15:08:00 +02:00

8 lines
281 B
YAML

# NOT included in kustomization: ESO v0.16.1 propagation must be fixed first.
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding
metadata:
name: reject-secret-last-applied
spec:
policyName: reject-secret-last-applied
validationActions: [Deny]