What is Kubernetes Pod Security Standards Integration?

Question

Accepted Answer

**Integration** — combine Pod Security Standards with other tools.

```yaml
# Namespace with PSS + NetworkPolicy
apiVersion: v1
kind: Namespace
metadata:
  name: production
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/enforce-version: latest
---
# NetworkPolicy
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: deny-all
  namespace: production
spec:
  podSelector: {}
  policyTypes:
  - Ingress
  - Egress
---
# ResourceQuota
apiVersion: v1
kind: ResourceQuota
metadata:
  name: compute-quota
  namespace: production
spec:
  hard:
    requests.cpu: "8"
    requests.memory: "16Gi"
    limits.cpu: "16"
    limits.memory: "32Gi"
---
# LimitRange
apiVersion: v1
kind: LimitRange
metadata:
  name: default-limits
  namespace: production
spec:
  limits:
  - type: Container
    default:
      cpu: "500m"
      memory: "256Mi"
    defaultRequest:
      cpu: "100m"
      memory: "128Mi"
    max:
      cpu: "4"
      memory: "4Gi"
    min:
      cpu: "50m"
      memory: "64Mi"
```

```bash
# Check all security configurations
kubectl get namespace production -o yaml | grep -E "pod-security|networking|resourcequota|limitrange"

# Verify PSS
kubectl get namespace production -o yaml | grep pod-security

# Check NetworkPolicy
kubectl get networkpolicy -n production

# Check ResourceQuota
kubectl get resourcequota -n production

# Check LimitRange
kubectl get limitrange -n production

# Test integration
kubectl apply -f compliant-pod.yaml  # Should succeed
kubectl apply -f non-compliant-pod.yaml  # Should fail
```

**Integrations:**
- NetworkPolicy: network security.
- ResourceQuota: resource limits.
- LimitRange: default limits.
- RBAC: access control.

**Benefits:**
- Defense in depth.
- Comprehensive security.
- Compliance.

DevOps: What is Kubernetes Pod Security Standards Integration?