What is Kubernetes Pod Security Standards Privileged?

Question

Accepted Answer

**Privileged** — unrestricted Pod security for system namespaces.

```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: kube-system
  labels:
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/enforce-version: latest
---
apiVersion: v1
kind: Pod
metadata:
  name: system-pod
  namespace: kube-system
spec:
  hostNetwork: true
  hostPID: true
  containers:
  - name: kube-proxy
    image: kube-proxy:latest
    securityContext:
      privileged: true
```

```bash
kubectl get pods -n kube-system -o json | jq '.items[] | select(.spec.containers[].securityContext.privileged == true) | .metadata.name'
```

**Use cases:** system components, CNI, storage drivers.

DevOps: What is Kubernetes Pod Security Standards Privileged?