Skip to content

Commit 42eecf0

Browse files
committed
Added references to the blog post for v1.23, renamed section
1 parent 15e99a2 commit 42eecf0

File tree

5 files changed

+27
-9
lines changed

5 files changed

+27
-9
lines changed

content/en/docs/tutorials/_index.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,8 +59,8 @@ Before walking through each tutorial, you may want to bookmark the
5959

6060
## Pod Security
6161

62-
* [Applying Pod Security Standards at Cluster level](/docs/tutorials/pod-security/cluster-level-pss/)
63-
* [Applying Pod Security Standards at Namespace level](/docs/tutorials/pod-security/ns-level-pss/)
62+
* [Applying Pod Security Standards at Cluster level](/docs/tutorials/security/cluster-level-pss/)
63+
* [Applying Pod Security Standards at Namespace level](/docs/tutorials/security/ns-level-pss/)
6464

6565
## {{% heading "whatsnext" %}}
6666

content/en/docs/tutorials/pod-security/_index.md

Lines changed: 0 additions & 5 deletions
This file was deleted.
Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
title: "Security"
3+
weight: 40
4+
---
5+

content/en/docs/tutorials/pod-security/cluster-level-pss.md renamed to content/en/docs/tutorials/security/cluster-level-pss.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,14 @@ content_type: tutorial
44
weight: 10
55
---
66

7-
{{% alert title="Disclaimer" %}}
7+
{{% alert title="Note" %}}
88
This tutorial applies only for new clusters.
99
{{% /alert %}}
1010

11+
Since v1.23, Pod Security admission (PSA) is enabled by default as it [graduated
12+
to beta](blog/_posts/2021-12-15-pod-security-admission-beta.md). In this
13+
tutorial, we will enforce `baseline` Pod Security Standard, at a cluster level.
14+
1115
## {{% heading "prerequisites" %}}
1216

1317
Install the following on your workstation:
@@ -255,6 +259,11 @@ $ kubectl apply -f /tmp/pss/nginx-pod.yaml
255259
Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
256260
pod/nginx created
257261
```
262+
# Clean up
263+
264+
Run `kind delete cluster -name psa-with-cluster-pss` and
265+
`kind delete cluster -name psa-wo-cluster-pss` to delete the clusters we
266+
created.
258267
259268
# Bringing it all together
260269

content/en/docs/tutorials/pod-security/ns-level-pss.md renamed to content/en/docs/tutorials/security/ns-level-pss.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,15 @@ content_type: tutorial
44
weight: 10
55
---
66

7-
{{% alert title="Disclaimer" %}}
7+
{{% alert title="Note" %}}
88
This tutorial applies only for new clusters.
99
{{% /alert %}}
1010

11+
Since v1.23, Pod Security admission (PSA) is enabled by default as it [graduated
12+
to beta](blog/_posts/2021-12-15-pod-security-admission-beta.md). In this
13+
tutorial, we will enforce `baseline` Pod Security Standard, at a namespace
14+
level.
15+
1116
# Pre-requisites
1217

1318
Install the following on your workstation:
@@ -104,6 +109,10 @@ Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation
104109
pod/nginx created
105110
```
106111

112+
# Clean up
113+
114+
Run `kind delete cluster -name psa-ns-level` to delete the cluster created.
115+
107116
# Bringing it all together
108117

109118
Running the commands in this

0 commit comments

Comments
 (0)