HandsOn PodSecurity Policies
summary
Demonstrates Kubernetes PodSecurityPolicies and the admission controller by creating PSPs, RoleBindings and namespace scoping with kubectl and the API, then deploying pods to show which are allowed or denied. Covers concrete rules: deny hostNetwork, forbid hostPath mounts, drop all capabilities, explains when exceptions are needed, and shows namespaces enforcing different policies so protections apply without breaking normal apps.
AI-written summary · about
chapters (7)
- 0:00Welcome
- 6:56What are PodSecurityPolicies
- 13:18How PodSecurityPolicies work
- 22:14Implementing policies
- 29:10Namespace isolation
- 33:27Demo and examples
- 36:33Q&A
related talks
41mUsing Pod Security Policies to harden your Kubernetes cluster
40mKubernetes Security After Pod Security Policies Removal
36mKubernetes Security After Pod Security Policies Removal
35mPSP is Dead, Long Live PodSecurity
30mPod Security as an Afterthought
12mTalk Deep Dive
35mPodSecurityPolicy Replacement: Past, Present, and Future
30mEvolution of security strategies in K8s environments