mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-09-27 13:38:07 +00:00
note requirements for using PSPs in a project
This commit is contained in:
@@ -17,6 +17,8 @@ _Pod Security Policies_ (or PSPs) are objects that control security-sensitive as
|
|||||||
- You can override the default PSP by assigning a different PSP directly to the project.
|
- You can override the default PSP by assigning a different PSP directly to the project.
|
||||||
- Any workloads that are already running in a cluster or project before a PSP is assigned will not be checked if it complies with the PSP. Workloads would need to be cloned or upgraded to see if they pass the PSP.
|
- Any workloads that are already running in a cluster or project before a PSP is assigned will not be checked if it complies with the PSP. Workloads would need to be cloned or upgraded to see if they pass the PSP.
|
||||||
|
|
||||||
|
>**NOTE:** You must enable PSPs at the cluster level before you can assign them to a project. This can be found under the "Edit cluster" menu.
|
||||||
|
|
||||||
Read more about Pod Security Policies in the [Kubernetes Documentation](https://kubernetes.io/docs/concepts/policy/pod-security-policy/).
|
Read more about Pod Security Policies in the [Kubernetes Documentation](https://kubernetes.io/docs/concepts/policy/pod-security-policy/).
|
||||||
|
|
||||||
>**Best Practice:** Set pod security at the cluster level.
|
>**Best Practice:** Set pod security at the cluster level.
|
||||||
|
|||||||
Reference in New Issue
Block a user