Difference between revisions of "Kubernetes Pod Security Admission (PSA)"

Latest revision as of 08:54, 26 January 2024

Kubernetes v1.25 (Aug 2022, stable)

Pod Security Standards (PSS) and Pod Security Admission (PSA) define security restrictions for a broad set of workloads since Kubernetes v1.23 (Dec 2021), and replaced Pod Security Policies (PSP) since Kubernetes v1.25 (Aug 2022). PSS define security levels for workloads. PSAs describe requirements for pod security contexts and related fields. PSAs reference PSS levels to define security restrictions. ^[1]

pod-security.kubernetes.io

enforce
audit
warn

@@ Line 1: / Line 1: @@
+[[Kubernetes v1.25]] (Aug 2022, stable)
 * https://kubernetes.io/docs/concepts/security/pod-security-admission/
-[[Kubernetes v1.25]] (stable)
+[[Pod Security Standards (PSS)]] and [[Pod Security Admission (PSA)]] define security restrictions for a broad set of workloads since [[Kubernetes v1.23]] (Dec 2021), and replaced [[Pod Security Policies (PSP)]] since [[Kubernetes v1.25]] (Aug 2022). PSS define security levels for workloads. PSAs describe requirements for pod security contexts and related fields. PSAs reference PSS levels to define security restrictions. <ref>https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards</ref>
+ [[pod-security.kubernetes.io]]
   enforce
@@ Line 7: / Line 12: @@
 == Related ==
-* [[CKS]]
+* [[Certified Kubernetes Security Specialist (CKS)]]
+* <code>[[pod-security.kubernetes.io/]]</code>
+* [[Pod Security Standards (PSS)]]
+* <code>[[global.cattle.psp.enabled]]</code>
 == News ==
-* Aug 2022 Pod Security Admission Controller in Stable https://kubernetes.io/blog/2022/08/25/pod-security-admission-stable/
+* Aug 2022 [[Kubernetes v1.25]]: Pod Security Admission Controller (PSA) in Stable https://kubernetes.io/blog/2022/08/25/pod-security-admission-stable/
 == See also ==
-* {{K8s}}
+* {{PSA}}
+* {{K8s security}}
 [[Category:K8s]]