Pod Security and Policies

RBAC decides who may create a Pod, not what the Pod may do: Pod Security limits its privileges on the node, and NetworkPolicies limit whom it can talk to.

Subsections

• Pod Security Standards
• Pod Security Admission
• Default-Deny Policies
• Policy Rules
• Isolating the Database
• Local Policy Enforcement