starlingx/docs
Code Issues Proposed changes

Merge "Adding note of PSP removal from the project documentation"

Browse Source
This commit is contained in:
Zuul 2023-07-18 15:01:30 +00:00 committed by Gerrit Code Review
commit 5bb538f19b
5 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/archive/configuration/k8s_pod_sec_policies.rst
View File

@ -2,6 +2,13 @@
Pod Security Policies
=====================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
.. note::
This guide was replaced by: :ref:`Pod Security Policies <pod-security-policies>`

7
doc/source/security/kubernetes/assign-pod-security-policies.rst
View File

@ -6,6 +6,13 @@
Assign Pod Security Policies
============================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
This section describes Pod security policies for **cluster-admin users**,
and **non-cluster-admin users**.

7
doc/source/security/kubernetes/disable-pod-security-policy-checking.rst
View File

@ -6,6 +6,13 @@
Disable Pod Security Policy Checking
====================================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
You can delete the previously added PodSecurityPolicy service parameter to
disable pod security policy checking.

7
doc/source/security/kubernetes/enable-pod-security-policy-checking.rst
View File

@ -6,6 +6,13 @@
Enable Pod Security Policy Checking
===================================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
.. rubric:: |proc|
#. Set the kubernetes kube_apiserver admission_plugins system parameter to

7
doc/source/security/kubernetes/pod-security-policies.rst
View File

@ -6,6 +6,13 @@
Pod Security Policies
=====================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
|PSPs| enable fine-grained authorization of pod creation and updates.
|PSPs| control access to security sensitive aspects of Pod specifications