Session

Goodbye Pod Security Policy - Hello stronger alternatives

Back in December, it was announced to deprecate the pod security policy (PSP) in Kubernetes version 1.21 and to remove the API completely at version 1.25. This decision could leave many Kubernetes users at risk of being exposed to various exploits.
In the meantime, stronger alternatives have emerged in the form of Open Policy Agent and Kyverno. Each of them brings its own strengths and weaknesses.
Both of these projects are viable replacements for PSPs, they are vastly more capable than simply acting on Pods alone--they are full Kubernetes policy engines.
Let's have a look together to figure out which one fits your requirements.

Mario Fahlandt

Service Delivery Architect

Schirnding, Germany

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.

Jump to top