README
¶
Pod Security Admission
The Pod Security Standards are a set of best-practice profiles for running pods securely.
This repository contains the codified profile definitions, the implementation for the PodSecurity admission controller (library and webhook) that enforces the use of the standards, and testing resources for validating enforcement of the standards.
See https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/2579-psp-replacement for more details.
Community, discussion, contribution, and support
The Pod Security Standards are a sub-project of SIG-Auth.
You can reach the maintainers of this project at:
- Slack: #sig-auth
- Mailing List: kubernetes-sig-auth
Learn how to engage with the Kubernetes community on the community page.
Code of conduct
Participation in the Kubernetes community is governed by the Kubernetes Code of Conduct.
Documentation
¶
Overview ¶
Package podsecurityadmission is a placeholder until the initial podsecurity implementation is added.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package admission contains PodSecurity admission logic
|
Package admission contains PodSecurity admission logic |
|
api
Package api contains PodSecurity admission configuration file types
|
Package api contains PodSecurity admission configuration file types |
|
api/v1
Package v1 contains PodSecurity admission configuration file types
|
Package v1 contains PodSecurity admission configuration file types |
|
api/v1alpha1
Package v1alpha1 contains PodSecurity admission configuration file types
|
Package v1alpha1 contains PodSecurity admission configuration file types |
|
api/v1beta1
Package v1beta1 contains PodSecurity admission configuration file types
|
Package v1beta1 contains PodSecurity admission configuration file types |
|
Package api contains constants and helpers for PodSecurity admission label keys and values
|
Package api contains constants and helpers for PodSecurity admission label keys and values |
|
cmd
|
|
|
webhook/server
Package server implements a Server object for running the admission controller as a webhook server.
|
Package server implements a Server object for running the admission controller as a webhook server. |
|
Package metrics contains metrics interfaces and implementations for PodSecurity admission
|
Package metrics contains metrics interfaces and implementations for PodSecurity admission |
|
Package policy contains implementations of Pod Security Standards checks
|
Package policy contains implementations of Pod Security Standards checks |
|
Package test contains tests for PodSecurity admission
|
Package test contains tests for PodSecurity admission |