๐ To enhance Kubernetes security, you must regulate and limit the number of pods that may be generated and deployed in your environment. Kubernetes has given a beta feature called Pod Security Policy (PSP) for this purpose, which will shortly be deprecated and replaced with a standard called Pod Security Standards (PSS).
๐ Because PSPs are being phased out and are no longer being actively developed, cluster administrators and operators must replace those security measures. This need can be met by two options:
โกPolicy-as-code (PAC) solutions from the Kubernetes ecosystem.
โกKubernetes Pod Security Standards (PSS) & Pod Security Admission (PSA).
๐ The Kubernetes Auth Special Interest Group produced the Pod Security Standards (PSS) and Pod Security Admission (PSA) in response to the PSP deprecation and the continued requirement to govern pod security out-of-the-box, using a built-in Kubernetes solution (PSA). The PSA effort includes a webhook project for admission controllers that implements the controls described in the PSS.
๐ค So, want to know about ๐๐จ๐ ๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐๐ญ๐๐ง๐๐๐ซ๐๐ฌ (๐๐๐)?
Check out this blog https://k21academy.com/kubernetes65 โ that covers:
๐ Pod Security Policy & its depreciation
๐ Moving to a new pod security solution
๐ Pod Security Standards (PSS) and Pod Security Admission (PSA)
๐ซ Want more in-depth training? Register for the ๐ ๐๐๐ ๐๐๐๐๐ now at https://k21academy.com/k8s02