chore: chart version bump

Signed-off-by: Ved Ratan <[email protected]>

Author: VedRatan

charts/rbac-best-practices/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: rbac-best-practice-policies
 description: Rbac Best Practice policy set
 type: application
-version: 0.2.0
+version: 0.2.1
 appVersion: 0.1.0
 keywords:
   - kubernetes

charts/rbac-best-practices/pols/restrict-automount-sa-token.yaml

@@ -24,6 +24,62 @@ spec:
       - resources:
           kinds:
           - Pod
+    exclude:
+      any:
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app: nirmata-kube-controller
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app: otel-agent
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/name: nirmata-kyverno-operator
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: admission-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: cleanup-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: background-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              app.kubernetes.io/component: reports-controller    
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              batch.kubernetes.io/job-name: "kyverno-cleanup-admission-reports-*"   
+      - resources:
+          kinds:
+          - Pod
+          selector:
+            matchLabels:
+              batch.kubernetes.io/job-name=kyverno: "cleanup-cluster-admission-reports-*" 
     preconditions:
       all:
       - key: "{{ request.\"object\".metadata.labels.\"app.kubernetes.io/part-of\" || '' }}"

rbac-best-practices/restrict-automount-sa-token/restrict-automount-sa-token.yaml

@@ -24,62 +24,6 @@ spec:
       - resources:
           kinds:
           - Pod
-    exclude:
-      any:
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app: nirmata-kube-controller
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app: otel-agent
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/name: nirmata-kyverno-operator
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: admission-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: cleanup-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: background-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              app.kubernetes.io/component: reports-controller    
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              batch.kubernetes.io/job-name: "kyverno-cleanup-admission-reports-*"   
-      - resources:
-          kinds:
-          - Pod
-          selector:
-            matchLabels:
-              batch.kubernetes.io/job-name=kyverno: "cleanup-cluster-admission-reports-*" 
     preconditions:
       all:
       - key: "{{ request.\"object\".metadata.labels.\"app.kubernetes.io/part-of\" || '' }}"
@@ -89,4 +33,4 @@ spec:
       message: "Auto-mounting of Service Account tokens is not allowed."
       pattern:
         spec:
-          automountServiceAccountToken: "false"
+          automountServiceAccountToken: "false"