問題文
A team wants requests submitted by a specific service account to bypass all Kyverno processing. Which ConfigMap key does this, and what is the format?
選択肢
- backgroundServiceAccountName, because naming any service account there tells the admission controller to disregard the AdmissionReview requests that come from it, which is the general mechanism for exempting a principal.
- excludeGroups, which takes a single group name only.
- excludeUsernames, which supports a comma-separated list and an exclamation mark to negate an entry.
- resourceFilters, with the service account name in the third position of the bracket notation.