Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
kubectl get psp


kubectl get roles --all-namespaces
kubectl get clusterroles


#check access
$ kubectl auth can-i use psp/privileged
Warning: resource 'podsecuritypolicies' is not namespace scoped in group 'policy'
yes


$ kubectl auth can-i use psp/privileged --as-group=system:authenticated --as=any-user
Warning: resource 'podsecuritypolicies' is not namespace scoped in group 'policy'
no



References

ReferenceURL
Getting started with Pod Security Policies and best practices in Productionhttps://www.youtube.com/watch?v=30ro9_ivTek
PSP Documentationhttps://kubernetes.io/docs/concepts/policy/pod-security-policy/


...