Pod Security Standards

Kubernetes
#1

What is the difference between user defined psp and the psp such as restricted, previliged and baseline ?

#2

Hello @dnpuneeth3,

Both are working in the same way, but Pod Security Standard provides 3 predefined policies for you to use in different circumstances (Pod Security Standards | Kubernetes).
With a user-defined way, you can customize the policies based on your own need by creating YAML files, config the values, and applying it.
One more thing, PSP is deprecated (will be removed in k8s 1.25) Pod Security Policies | Kubernetes.

Happy learning,
Trung.

#3

If the user don’t specify the psp then which is psp is considered as a default among restricted, previliged and baseline ?

Can’t user edit the restricted, previliged and baseline psp ?

#4

Hi @dnpuneeth3,

You can’t modify the predefined PSP, applying PSP is optional, you have full control of that, k8s will not apply the default PSP.

Happy learning,
Trung.

#5

Are Pod Security Standards topic covered in the KodeKloud courses ?

#6

It is part of the CKS course (Certified Kubernetes Security Specialist (CKS) | KodeKloud), but as PSP is deprecated, so you may not need to learn it (at least for exam purposes).

Happy learning,
Trung.

#7

I referred the PSP CKS videos and did not find about Pod Security Standards. Could you please verify once ?

1 Like
#8

Let me check and get back!

#9

Hi @dnpuneeth3,

Sorry, I provide the incorrect information, this is not yet available.
This will be released within our next release (the current exam env is 1.24, it will be released with v1.25).
We will keep you updated on that.

Happy learning,
Trung.

#10

How to identify the version in which feature was introduced using documentation ?

#11

Hi @dnpuneeth3,

For the exam env, please follow up Linux Foundation site, for KodeKloud will be published on the website/blog/slack.

Happy learning,
Trung.