starlingx/docs
Code Issues Proposed changes

Adding note of PSP removal from the project documentation

Browse Source 
Removal of PSP Support as part of k8s 1.25/1.26 transition,
we are adding a note to each page that has pod security policy
contexts from the project doc about its existence in K8S v1.24
and removal from K8S v1.25

Story: 2010590
Task: 48324

Change-Id: Ifefeda7ac181267b66398dbf45af9f6ee1239090
Signed-off-by: Rahul Roshan Kachchap <rahulroshan.kachchap@windriver.com>
This commit is contained in:
Rahul Roshan Kachchap 2023-07-17 02:16:07 -04:00
parent 72ffc9c3a3
commit f076c3a387
5 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/archive/configuration/k8s_pod_sec_policies.rst
View File

@ -2,6 +2,13 @@
Pod Security Policies
=====================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
.. note::
This guide was replaced by: :ref:`Pod Security Policies <pod-security-policies>`

7
doc/source/security/kubernetes/assign-pod-security-policies.rst
View File

@ -6,6 +6,13 @@
Assign Pod Security Policies
============================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
This section describes Pod security policies for **cluster-admin users**,
and **non-cluster-admin users**.

7
doc/source/security/kubernetes/disable-pod-security-policy-checking.rst
View File

@ -6,6 +6,13 @@
Disable Pod Security Policy Checking
====================================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
You can delete the previously added PodSecurityPolicy service parameter to
disable pod security policy checking.

7
doc/source/security/kubernetes/enable-pod-security-policy-checking.rst
View File

@ -6,6 +6,13 @@
Enable Pod Security Policy Checking
===================================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
.. rubric:: |proc|
#. Set the kubernetes kube_apiserver admission_plugins system parameter to

7
doc/source/security/kubernetes/pod-security-policies.rst
View File

@ -6,6 +6,13 @@
Pod Security Policies
=====================
.. note::
PodSecurityPolicy (PSP) ONLY applies if running on K8S v1.24 or earlier.
PodSecurityPolicy (PSP) is deprecated as of Kubernetes v1.21 and removed from K8S v1.25.
Instead of using PodSecurityPolicy, you can enforce similar restrictions on Pods using
:ref:`Pod Security Admission Controller <pod-security-admission-controller-8e9e6994100f>`
|PSPs| enable fine-grained authorization of pod creation and updates.
|PSPs| control access to security sensitive aspects of Pod specifications