PSA instead of PSP, if k8s v1.23

[longwuyuan]

• K8s v1.23 and above
• There is Pod Security Admissions now instead of PSP v1.23 blog post: Pod Security Admission Graduates to Beta website#30502
• Tasks involved are ;
  • testing psa
  • Checking our manifests
  • Using psa instead of psp when available
  • Writing about it :)

Discussed here https://kubernetes.slack.com/archives/C021E147ZA4/p1638934880237600 and here https://kubernetes.slack.com/archives/C021E147ZA4/p1638934905238500

/assign
/remove-kind bug
/kind documentation
/area docs
/feature

[k8s-ci-robot]

@longwuyuan: This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[longwuyuan]

@indhupriya , I had dropped the ball on this due to unavoidable reasons. But this seems still a valid work to be done. It will take a while to get this done but it will be fun. Do you want to pair with me on looking into this ?

[longwuyuan]

/lifecycle active

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale