TL;DR PodSecurityPolicy exists in Kubernetes to provide security controls for pods. PSPs are deprecated in 1.21 (April 2021) and will be removed entirely in 1.25 ( expected around April 2022). This article explains what PSPs are and its alternatives. We created a PSP migration tool that translates existing PSPs to…

Introduction Following on from PodSecurityPolicy is Dead, Long Live…? this tutorial covers the practical use of a new tool from the Kubernetes Node Specialist Interest Group. The Linux kernel (the same marvel that brings us containers) provides a few capabilities for bridging the last mile in security management limiting the actual…

This is a continuation of the PodSecurityPolicy is Dead, Long live…? article, which looks at how to construct the most effective policy for your Kubernetes infrastructure. Haven’t read that? Check it out first. Based on that foundation, this article looks at how versioning policies streamline the developer experience to deliver…

A production-ready application needs to be discoverable and accessible over a secure endpoint, and it can be both complex and time consuming to implement a solution that is easy to consume, maintain and scale. This tutorial brings a few tools together to publish your Kubernetes applications securely, and offers up…