Pod security standards in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What are Pod Security Standards in Kubernetes?

Pod Security Standards are predefined security profiles that help control the security settings of pods to protect the cluster from unsafe configurations.

beginner

Name the three main Pod Security Standards profiles.

The three main profiles are: Privileged, Baseline, and Restricted. Each defines different levels of security restrictions for pods.

intermediate

What does the 'Restricted' Pod Security Standard profile enforce?

The Restricted profile enforces the highest security level by limiting permissions and capabilities, preventing privilege escalation, and enforcing strict policies.

intermediate

How can Pod Security Standards be applied in a Kubernetes cluster?

They can be applied using the Pod Security Admission Controller to enforce security profiles on pods during creation or update.

beginner

Why is it important to use Pod Security Standards?

Using Pod Security Standards helps prevent security risks like privilege escalation, unauthorized access, and unsafe container configurations, protecting the cluster and workloads.

Which Pod Security Standard profile allows the most permissions?

A Baseline

B Restricted

C Privileged

D None

The Privileged profile allows the most permissions, with minimal restrictions.

What tool in Kubernetes enforces Pod Security Standards during pod creation?

A etcd

B kubectl apply

C kube-proxy

D Pod Security Admission Controller

Pod Security Admission Controller enforces Pod Security Standards when pods are created or updated.

Which Pod Security Standard profile is recommended for most production workloads?

A Privileged

B Baseline

C Restricted

D None

Baseline profile balances security and usability, suitable for most production workloads.

What is a key restriction in the Restricted Pod Security Standard?

A Disallowing privilege escalation

B No restrictions

C Allowing all capabilities

D Allowing privilege escalation

Restricted profile disallows privilege escalation to enhance security.

Pod Security Standards help prevent which of the following?

A Unsafe container configurations

B Faster pod startup

C Increased resource usage

D Automatic scaling

They help prevent unsafe container configurations that could lead to security risks.

Explain the differences between the Privileged, Baseline, and Restricted Pod Security Standard profiles.

Think about how each profile controls pod permissions and security.

Describe how Pod Security Standards improve security in a Kubernetes cluster.

Focus on the security risks these standards help to reduce.