Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Overview

We want to configure strict enforcement of rules to limit unauthorized manipulation of our kubernetes cluster.

...

Code Block
namespace/default labeled


Exemptions

You can define exemptions from pod security enforcement in order to allow the creation of pods that would have otherwise been prohibited due to the policy associated with a given namespace.


....

References

ReferenceURL
Apply Pod Security Standards at the Cluster Levelhttps://kubernetes.io/docs/tutorials/security/cluster-level-pss/
Apply Pod Security Standards at the Namespace Levelhttps://kubernetes.io/docs/tutorials/security/ns-level-pss/
Pod Security Admissionhttps://kubernetes.io/docs/concepts/security/pod-security-admission/
Migrate from PodSecurityPolicy to the Built-In PodSecurity Admission Controllerhttps://kubernetes.io/docs/tasks/configure-pod-container/migrate-from-psp/