Скачать или смотреть How to create a Kubernetes security policy

If you're looking to take your Kubernetes security to the next level, you'll want to start working with pod security policies. Here's a quick introduction to this feature.

For the full step-by-step article, head to https://www.techrepublic.com/article/...

List of Commands:

nano psp.yaml
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: psp
spec:
privileged: false
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
runAsUser:
rule: RunAsAny
fsGroup:
rule: RunAsAny
volumes:
'*'
privileged: false
kubectl apply -f psp.yaml
podsecurity.policy/psp created
kubectl get psp psp
nano rbac-psp.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: psp:psp
rules:
apiGroups:
extensions
resources:
podsecuritypolicies
resourceNames:
psp
verbs:
use
---

kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: psp:psp
subjects:
kind: Group
name: system:authenticated
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: psp:psp
apiGroup: rbac.authorization.k8s.io
kubectl apply -f rbac-psp.yaml
kubectl auth can-i use psp/psp
kubectl auth can-i use psp/psp --as-group=system:authenticated --as=any-user

Watch more How To videos:    / @howtomaketechwork  
Watch more TechRepublic videos: https://www.techrepublic.com/videos/
Follow TechRepublic on Twitter:   / techrepublic  
Follow TechRepublic on Facebook:   / techrepublic  
Follow TechRepublic on Instagram:   / techrepublic  
Follow TechRepublic on LinkedIn:   / tech.  .

Watch Tech Stories, a series of mini documentaries from TechRepublic: https://www.youtube.com/watch?v=RRPAs...