Kubernetes Pod Security Admission (PSA)

Kubernetes v1.25 (Aug 2022, stable)

• https://kubernetes.io/docs/concepts/security/pod-security-admission/

Pod Security Standards (PSS) and Pod Security Admission (PSA) define security restrictions for a broad set of workloads since Kubernetes v1.23 (Dec 2021), and replaced Pod Security Policies (PSP) since Kubernetes v1.25 (Aug 2022).

enforce
audit
warn

Related

• Certified Kubernetes Security Specialist (CKS)
• pod-security.kubernetes.io/
• Pod Security Standards (PSS)

News

• Aug 2022 Pod Security Admission Controller in Stable https://kubernetes.io/blog/2022/08/25/pod-security-admission-stable/

See also

• Kubernetes Pod Security Admission (PSA), pod-security.kubernetes.io
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing