Use Pod Security Policies

Pod Security Policies (PSPs) are default-enabled cluster-level resources. There are two default PSPs in MKE: a privileged policy and an unprivileged policy. Administrators of the cluster can enforce additional policies and apply them to users and teams for further control of what runs in the Kubernetes cluster. This topic describes the two default policies and provides two example use cases for custom policies.

• Configure Kubernetes access for PSPs
• Default Pod security policies in MKE
• Use the unprivileged policy
• Reenable the privileged PSP for all users
• PSP examples