diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md new file mode 100644 index 00000000000..9cdca4e1902 --- /dev/null +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md @@ -0,0 +1,22 @@ +--- +title: Pod Security Standards +--- + + +[Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) are a built-in replacement for Pod Security Policies which broadly define security restrictions. + + + + + + + + +### TODO + +* PSAC templates + * How they work, what the flow is + * That updating a template will affect live clusters + * Who can edit. Including a template management role workaround with it's own warning/caveat. +* How to upgrade + * Ensure that a replacement is in place before you upgrade and PSPs are off \ No newline at end of file diff --git a/sidebars.js b/sidebars.js index 2449189c69e..71337f1e1b5 100644 --- a/sidebars.js +++ b/sidebars.js @@ -317,6 +317,7 @@ const sidebars = { "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-cluster-templates", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",