From 7c5f243af78a5e8f16250680598ccab52891dc76 Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Thu, 26 May 2022 16:17:26 -0700 Subject: [PATCH 1/3] move other policy engines Signed-off-by: Jim Bugwadia --- .../security/pod-security-standards.md | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md index 393468ac74..8ed45f0cce 100644 --- a/content/en/docs/concepts/security/pod-security-standards.md +++ b/content/en/docs/concepts/security/pod-security-standards.md @@ -458,6 +458,16 @@ of individual policies are not defined here. - {{< example file="policy/baseline-psp.yaml" >}}Baseline{{< /example >}} - {{< example file="policy/restricted-psp.yaml" >}}Restricted{{< /example >}} +### Other + +{{% thirdparty-content %}} + +Other alternatives for enforcing policies are being developed in the Kubernetes ecosystem, such as: +- [Kubewarden](https://github.com/kubewarden) +- [Kyverno](https://kyverno.io/policies/pod-security/) +- [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper) + + ## FAQ ### Why isn't there a profile between privileged and baseline? @@ -481,14 +491,6 @@ as well as other related parameters outside the Security Context. As of July 202 [Pod Security Policies](/docs/concepts/security/pod-security-policy/) are deprecated in favor of the built-in [Pod Security Admission Controller](/docs/concepts/security/pod-security-admission/). -{{% thirdparty-content %}} - -Other alternatives for enforcing security profiles are being developed in the Kubernetes -ecosystem, such as: -- [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper). -- [Kubewarden](https://github.com/kubewarden). -- [Kyverno](https://kyverno.io/policies/pod-security/). - ### What profiles should I apply to my Windows Pods? Windows in Kubernetes has some limitations and differentiators from standard Linux-based From 495642c6881b9bc0eaccbb0fecf08f47eecef6fb Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Thu, 26 May 2022 17:43:29 -0700 Subject: [PATCH 2/3] Update content/en/docs/concepts/security/pod-security-standards.md Co-authored-by: Qiming Teng --- content/en/docs/concepts/security/pod-security-standards.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md index 8ed45f0cce..4f005bb941 100644 --- a/content/en/docs/concepts/security/pod-security-standards.md +++ b/content/en/docs/concepts/security/pod-security-standards.md @@ -458,7 +458,7 @@ of individual policies are not defined here. - {{< example file="policy/baseline-psp.yaml" >}}Baseline{{< /example >}} - {{< example file="policy/restricted-psp.yaml" >}}Restricted{{< /example >}} -### Other +## Alternatives {{% thirdparty-content %}} From fb97ad2140c76b77858f593750cc3b7db0774b68 Mon Sep 17 00:00:00 2001 From: Jim Bugwadia Date: Mon, 30 May 2022 07:49:41 -0700 Subject: [PATCH 3/3] Update content/en/docs/concepts/security/pod-security-standards.md Co-authored-by: Rey Lejano --- content/en/docs/concepts/security/pod-security-standards.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md index 4f005bb941..793bc4fd90 100644 --- a/content/en/docs/concepts/security/pod-security-standards.md +++ b/content/en/docs/concepts/security/pod-security-standards.md @@ -458,7 +458,7 @@ of individual policies are not defined here. - {{< example file="policy/baseline-psp.yaml" >}}Baseline{{< /example >}} - {{< example file="policy/restricted-psp.yaml" >}}Restricted{{< /example >}} -## Alternatives +### Alternatives {{% thirdparty-content %}}