A platform engineer wants to prevent Pods from running as root across an entire Kubernetes namespace. Which Kubernetes mechanism is best suited to enforce this requirement?

Question

Accepted Answer

C. Pod Security Admission with the restricted or baseline policy applied to the namespace. Pod Security Admission enforces Pod Security Standards at the namespace level, including controls that prevent containers from running as root or with elevated privileges. NetworkPolicy controls network traffic between Pods, not container privilege levels. LimitRange controls resource quota boundaries and has no effect on security contexts.

A platform engineer wants to prevent Pods from running as root across an entire Kubernetes namespace. Which Kubernetes mechanism is best suited to enforce this requirement?

Related Questions

Discussion