kyverno/test/scenarios/other/scenario_validate_disallow_default_serviceaccount.yaml

# file path relative to project root
input:
  policy: test/policy/validate/policy_validate_disallow_default_serviceaccount.yaml
  resource: test/resources/resource_validate_disallow_default_serviceaccount.yaml
expected:
  validation:
    policyresponse:
      policy: validate-disallow-default-serviceaccount
      resource:
        kind: Pod
        apiVersion: v1
        namespace: ''
        name: pod-with-default-sa
      rules:
        - name: prevent-mounting-default-serviceaccount
          type: Validation
          message: "Validation error: Prevent mounting of default service account; Validation rule prevent-mounting-default-serviceaccount failed at path /spec/serviceAccountName/"
          success: false