Events

Back in December, it was announced to deprecate the pod security policy (PSP) in Kubernetes version 1.21 and to remove the API completely in version 1.25. This decision could leave many Kubernetes users at risk of being exposed to various exploits.

In the meantime, stronger alternatives have emerged in the form of Open Policy Agent and Kyverno. Each of them brings its own strengths and weaknesses.

Both of these projects are viable replacements for PSP: They are vastly more capable than simply acting on Pods alone – they are full Kubernetes policy engines.

Let’s have a look together to figure out which one fits your requirements.

Mario Fahlandt, Kubernetes Consultant at Kubermatic