Kubernetes Pod Security Admission (PSA)

Kubernetes v1.25 (Aug 2022, stable)

• https://kubernetes.io/docs/concepts/security/pod-security-admission/

Pod Security Standards (PSS) and Pod Security Admission (PSA) define security restrictions for a broad set of workloads since Kubernetes v1.23 (Dec 2021), and replaced Pod Security Policies (PSP) since Kubernetes v1.25 (Aug 2022). PSS define security levels for workloads. PSAs describe requirements for pod security contexts and related fields. PSAs reference PSS levels to define security restrictions.

pod-security.kubernetes.io

enforce
audit
warn

Related

• Certified Kubernetes Security Specialist (CKS)
• pod-security.kubernetes.io/
• Pod Security Standards (PSS)
• global.cattle.psp.enabled

News

• Aug 2022 Pod Security Admission Controller (PSA) in Stable https://kubernetes.io/blog/2022/08/25/pod-security-admission-stable/

See also

• Kubernetes Pod Security Admission (PSA), pod-security.kubernetes.io
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing

https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards