From f57735ae71b244abe1aae106ef366c6bb18cd602 Mon Sep 17 00:00:00 2001 From: Caleb Bron Date: Mon, 13 Feb 2023 15:38:58 -0700 Subject: [PATCH 1/2] Adds skeleton for PSS page --- .../pod-security-standards.md | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md new file mode 100644 index 00000000000..9cdca4e1902 --- /dev/null +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md @@ -0,0 +1,22 @@ +--- +title: Pod Security Standards +--- + + +[Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) are a built-in replacement for Pod Security Policies which broadly define security restrictions. + + + + + + + + +### TODO + +* PSAC templates + * How they work, what the flow is + * That updating a template will affect live clusters + * Who can edit. Including a template management role workaround with it's own warning/caveat. +* How to upgrade + * Ensure that a replacement is in place before you upgrade and PSPs are off \ No newline at end of file From b779e7049cdde424e710e5436c8b268d4501af9d Mon Sep 17 00:00:00 2001 From: Billy Tat Date: Mon, 13 Feb 2023 15:08:24 -0800 Subject: [PATCH 2/2] Add sidebar entry for PSS page --- sidebars.js | 1 + 1 file changed, 1 insertion(+) diff --git a/sidebars.js b/sidebars.js index 2449189c69e..71337f1e1b5 100644 --- a/sidebars.js +++ b/sidebars.js @@ -317,6 +317,7 @@ const sidebars = { "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-cluster-templates", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry",