What is Kubernetes Pod Security Standards Version?

Question

Accepted Answer

**Policy Version** — specify policy version for Pod Security Standards.

```yaml
# Use latest version
apiVersion: v1
kind: Namespace
metadata:
  name: production
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/enforce-version: latest
---
# Use specific version
apiVersion: v1
kind: Namespace
metadata:
  name: production
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/enforce-version: v1.28
---
# Mixed versions
apiVersion: v1
kind: Namespace
metadata:
  name: production
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/enforce-version: v1.28
    pod-security.kubernetes.io/audit: baseline
    pod-security.kubernetes.io/audit-version: latest
    pod-security.kubernetes.io/warn: privileged
    pod-security.kubernetes.io/warn-version: v1.27
```

```bash
# Check policy versions
kubectl get namespace production -o yaml | grep pod-security

# Verify version compatibility
kubectl version --short

# Check available versions
kubectl get namespace -o json | jq '.items[] | .metadata.labels | select(.["pod-security.kubernetes.io/enforce-version"])'

# Test version-specific behavior
kubectl apply -f pod.yaml 2>&1 | grep Warning

# Check audit logs
kubectl get events --field-selector reason=FailedCreate --sort-by=.lastTimestamp
```

**Version Options:**
- latest: always use latest policy.
- v1.XX: pin to specific Kubernetes version.

**Use cases:**
- Gradual policy adoption.
- Version-specific features.
- Testing before upgrade.

DevOps: What is Kubernetes Pod Security Standards Version?