From 67825a174b7ae58cdf78314086211cd56a7dab46 Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Mon, 26 Aug 2024 14:54:41 -0700 Subject: [PATCH] Update other/deny-default-service-accounts/deny-default-service-accounts.yaml Co-authored-by: Chip Zoller Signed-off-by: Jim Bugwadia --- .../deny-default-service-accounts.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/other/deny-default-service-accounts/deny-default-service-accounts.yaml b/other/deny-default-service-accounts/deny-default-service-accounts.yaml index f5bf69738..81a5ea30e 100644 --- a/other/deny-default-service-accounts/deny-default-service-accounts.yaml +++ b/other/deny-default-service-accounts/deny-default-service-accounts.yaml @@ -13,7 +13,7 @@ metadata: For an enhnaced security posture, it is recommended to use specific service accounts and not the default service accounts. These service accounts provide an identity for processes that run in individual Pods and map them to a ServiceAccount object. - This policy flags the Pods that use any default service accounts. + This policy prevents use of the default service account in Pods. spec: validationFailureAction: audit background: false