service account for remediation

Author: yairsappir

.circleci/tests/golden/wiz-outpost-lite/remediation-special-security-context.golden.yaml

@@ -1,4 +1,18 @@
 ---
+# Source: wiz-outpost-lite/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sa-remediation-aws-rds-003
+  namespace: release-helm-namespace
+  labels:
+    helm.sh/chart: "GOLDEN_STATIC_VALUE"
+    app.kubernetes.io/name: wiz-outpost-lite
+    app.kubernetes.io/instance: release-test
+    wiz.io/runner: "remediation-aws-rds-003"
+    app.kubernetes.io/version: "0.1.0"
+    app.kubernetes.io/managed-by: Helm
+---
 # Source: wiz-outpost-lite/templates/credentials.secret.yaml
 apiVersion: v1
 kind: Secret
@@ -66,6 +80,7 @@ spec:
         app.kubernetes.io/instance: release-test
         wiz.io/runner: "remediation-aws-rds-003"
     spec:
+      serviceAccountName: sa-remediation-aws-rds-003
       restartPolicy: Always
       containers:
         - name: wiz-outpost-lite-remediation-aws-rds-003

.circleci/tests/golden/wiz-outpost-lite/remediation.golden.yaml

@@ -1,4 +1,18 @@
 ---
+# Source: wiz-outpost-lite/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sa-remediation-aws-rds-003
+  namespace: release-helm-namespace
+  labels:
+    helm.sh/chart: "GOLDEN_STATIC_VALUE"
+    app.kubernetes.io/name: wiz-outpost-lite
+    app.kubernetes.io/instance: release-test
+    wiz.io/runner: "remediation-aws-rds-003"
+    app.kubernetes.io/version: "0.1.0"
+    app.kubernetes.io/managed-by: Helm
+---
 # Source: wiz-outpost-lite/templates/credentials.secret.yaml
 apiVersion: v1
 kind: Secret
@@ -66,6 +80,7 @@ spec:
         app.kubernetes.io/instance: release-test
         wiz.io/runner: "remediation-aws-rds-003"
     spec:
+      serviceAccountName: sa-remediation-aws-rds-003
       restartPolicy: Always
       containers:
         - name: wiz-outpost-lite-remediation-aws-rds-003

wiz-outpost-lite/values.yaml

@@ -94,6 +94,8 @@ modules:
       seLinuxOptions:
         type: spc_t
   remediation:
+    serviceAccount:
+      create: true
     podSecurityContext:
       runAsNonRoot: true
       runAsUser: 1000