|
43 | 43 | - [Optional Future Extensions](#optional-future-extensions)
|
44 | 44 | - [Automated PSP migration tooling](#automated-psp-migration-tooling)
|
45 | 45 | - [Rollout of baseline-by-default for unlabeled namespaces](#rollout-of-baseline-by-default-for-unlabeled-namespaces)
|
46 |
| - - [Custom Profiles](#custom-profiles) |
47 | 46 | - [Custom Warning Messages](#custom-warning-messages)
|
48 | 47 | - [Windows restricted profile support](#windows-restricted-profile-support)
|
49 | 48 | - [Offline Policy Checking](#offline-policy-checking)
|
50 |
| - - [Event recording](#event-recording) |
51 | 49 | - [Conformance](#conformance)
|
52 | 50 | - [Implementation History](#implementation-history)
|
53 | 51 | - [Drawbacks](#drawbacks)
|
@@ -976,13 +974,6 @@ or combined for a more aggressive rollout:
|
976 | 974 |
|
977 | 975 | Each step in the rollout could be overridden with a flag (e.g. force the admission plugin to step N)
|
978 | 976 |
|
979 |
| -### Custom Profiles |
980 |
| - |
981 |
| -Allow custom profile levels to be statically configured. E.g. |
982 |
| -`--extra-pod-security-levels=host-network`. Custom profiles are ignored by the built-in admission |
983 |
| -plugin, and must be handled completely by a 3rd party webhook (including the dry-run implementation, |
984 |
| -if desired). |
985 |
| - |
986 | 977 | ### Custom Warning Messages
|
987 | 978 |
|
988 | 979 | An optional `pod-security.kubernetes.io/warn-message` annotation can be used to return a custom
|
@@ -1018,10 +1009,6 @@ We could provide a standalone tool that is capable of checking the policies agai
|
1018 | 1009 | or through stdin. It should be capable of evaluating `AdmissionReview` resources, but also pod and
|
1019 | 1010 | templated pod resources. This could be useful in CI/CD pipelines and tests.
|
1020 | 1011 |
|
1021 |
| -### Event recording |
1022 |
| - |
1023 |
| -Allow recording an event in response to a pod creation attempt that exceeds a given level. |
1024 |
| - |
1025 | 1012 | ### Conformance
|
1026 | 1013 |
|
1027 | 1014 | As this feature progresses towards GA, we should think more about how it interacts with conformance.
|
|
0 commit comments