What is the significance of "Pod Security Standards" (or the deprecated PodSecurityPolicy) regarding container privilege levels?
Correct! Well done.
Incorrect.
The correct answer is B) They define policy levels (Privileged, Baseline, Restricted) that constrain what Pods can do — such as running as root, using host namespaces, or mounting host paths — enforcing security best practices cluster-wide via admission control
Correct Answer
They define policy levels (Privileged, Baseline, Restricted) that constrain what Pods can do — such as running as root, using host namespaces, or mounting host paths — enforcing security best practices cluster-wide via admission control
Pod Security Standards define graduated policy levels enforced via the built-in Pod Security Admission controller, restricting risky configurations (privileged containers, host namespace access, etc.) to reduce the cluster's attack surface.