Use Pod Security Policies¶
Pod Security Policies (PSPs) are default-enabled cluster-level resources.
There are two default PSPs in MKE: a
privileged policy and an
unprivileged policy. Administrators of the cluster can enforce additional
policies and apply them to users and teams for further control of what runs in
the Kubernetes cluster. This topic describes the two default policies and
provides two example use cases for custom policies.