Understanding Pod Security Policies

K8s Pune Meetup Talk

Pod Security Policies

Pre-requisites

1. You have a running K8s cluster
2. You have enabled PSP admission plugin

   kube-apiserver --enable-admission-plugins=PodSecurityPolicy
   

3. You have admin access to your K8s cluster and the corresponding KUBECONFIG

How to use the files in this repo

1. Clone this repo

   git clone https://github.com/platform9/pod-security-policy-demo.git
   

2. Get the KUBECONFIG for your cluster and set it as the active KUBECONFIG

   export KUBECONFIG=/path/to/your/kubeconfig.yaml
   

3. Run the commands in demo_steps.sh sequentially.

References

1. Pod Security Policies
2. PodSecurityPolicy Deprecation: Past, Present, and Future
3. Using RBAC Authorization
4. Using Admission Controllers