thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Pod Security Standards (PSS)

Three Kubernetes security profiles (Privileged, Baseline, Restricted) enforced per namespace by the built-in Pod Security Admission controller.

Definition

Namespaces are labeled with enforce, audit, or warn modes for a level. Pod Security Admission replaced the removed PodSecurityPolicy in v1.25.

Example

kubectl label ns prod pod-security.kubernetes.io/enforce=restricted

Exam tip

PodSecurityPolicy is removed; the answer is Pod Security Admission with namespace labels.

Related terms