kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Assume that kind provides Pod Security Admission 

Given that Pod Security Admission has been beta and then generally
available for a while, assume that kind gives the reader a cluster than
includes this feature.
This commit is contained in:
Tim Bannister 2022-10-29 15:52:24 +01:00
parent c38e5c00fb
commit 25a926e465
4 changed files with 20 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
content/en/docs/tutorials/security/cluster-level-pss.md
View File

@ -42,12 +42,12 @@ that are most appropriate for your configuration, do the following:
1. Create a cluster with no Pod Security Standards applied: 1. Create a cluster with no Pod Security Standards applied:
```shell ```shell
kind create cluster --name psa-wo-cluster-pss --image kindest/node:v1.24.0 kind create cluster --name psa-wo-cluster-pss
``` ```
The output is similar to this: The output is similar to:
``` ```
Creating cluster "psa-wo-cluster-pss" ... Creating cluster "psa-wo-cluster-pss" ...
✓ Ensuring node image (kindest/node:v1.24.0) 🖼 ✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
✓ Preparing nodes 📦 ✓ Preparing nodes 📦
✓ Writing configuration 📜 ✓ Writing configuration 📜
✓ Starting control-plane 🕹️ ✓ Starting control-plane 🕹️
@ -255,12 +255,12 @@ following:
these Pod Security Standards: these Pod Security Standards:
```shell ```shell
kind create cluster --name psa-with-cluster-pss --image kindest/node:v1.24.0 --config /tmp/pss/cluster-config.yaml kind create cluster --name psa-with-cluster-pss --config /tmp/pss/cluster-config.yaml
``` ```
The output is similar to this: The output is similar to this:
``` ```
Creating cluster "psa-with-cluster-pss" ... Creating cluster "psa-with-cluster-pss" ...
✓ Ensuring node image (kindest/node:v1.24.0) 🖼 ✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
✓ Preparing nodes 📦 ✓ Preparing nodes 📦
✓ Writing configuration 📜 ✓ Writing configuration 📜
✓ Starting control-plane 🕹️ ✓ Starting control-plane 🕹️

4
content/en/docs/tutorials/security/ns-level-pss.md
View File

@ -31,14 +31,14 @@ Install the following on your workstation:
1. Create a `KinD` cluster as follows: 1. Create a `KinD` cluster as follows:
```shell ```shell
kind create cluster --name psa-ns-level --image kindest/node:v1.23.0 kind create cluster --name psa-ns-level
``` ```
The output is similar to this: The output is similar to this:
``` ```
Creating cluster "psa-ns-level" ... Creating cluster "psa-ns-level" ...
✓ Ensuring node image (kindest/node:v1.23.0) 🖼 ✓ Ensuring node image (kindest/node:v{{< skew currentVersion >}}.0) 🖼
✓ Preparing nodes 📦 ✓ Preparing nodes 📦
✓ Writing configuration 📜 ✓ Writing configuration 📜
✓ Starting control-plane 🕹️ ✓ Starting control-plane 🕹️

2
content/en/examples/security/kind-with-cluster-level-baseline-pod-security.sh
View File

@ -51,7 +51,7 @@ nodes:
# default None # default None
propagation: None propagation: None
EOF EOF
kind create cluster --name psa-with-cluster-pss --image kindest/node:v1.23.0 --config /tmp/pss/cluster-config.yaml kind create cluster --name psa-with-cluster-pss --config /tmp/pss/cluster-config.yaml
kubectl cluster-info --context kind-psa-with-cluster-pss kubectl cluster-info --context kind-psa-with-cluster-pss
# Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available # Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available
sleep 15 sleep 15

4
content/en/examples/security/kind-with-namespace-level-baseline-pod-security.sh
View File

@ -1,7 +1,5 @@
#!/bin/sh #!/bin/sh
# Until v1.23 is released, kind node image needs to be built from k/k master branch kind create cluster --name psa-ns-level
# Ref: https://kind.sigs.k8s.io/docs/user/quick-start/#building-images
kind create cluster --name psa-ns-level --image kindest/node:v1.23.0
kubectl cluster-info --context kind-psa-ns-level kubectl cluster-info --context kind-psa-ns-level
# Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available # Wait for 15 seconds (arbitrary) ServiceAccount Admission Controller to be available
sleep 15 sleep 15