railiance-platform/argocd/platform-addons/secret-annotation-guard/binding.yaml
codex 7daf7e9067 fix(security): rebind annotation guard after ESO metadata remediation
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
2026-09-28 16:27:24 +02:00

8 lines
277 B
YAML

# CUST-WP-0073: explicit ESO target metadata verified before re-enabling.
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding
metadata:
name: reject-secret-last-applied
spec:
policyName: reject-secret-last-applied
validationActions: [Deny]