Skip to content

Commit 33f195b

Browse files
committed
2579: clean up future work
1 parent 882f308 commit 33f195b

File tree

1 file changed

+0
-13
lines changed

1 file changed

+0
-13
lines changed

keps/sig-auth/2579-psp-replacement/README.md

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -43,11 +43,9 @@
4343
- [Optional Future Extensions](#optional-future-extensions)
4444
- [Automated PSP migration tooling](#automated-psp-migration-tooling)
4545
- [Rollout of baseline-by-default for unlabeled namespaces](#rollout-of-baseline-by-default-for-unlabeled-namespaces)
46-
- [Custom Profiles](#custom-profiles)
4746
- [Custom Warning Messages](#custom-warning-messages)
4847
- [Windows restricted profile support](#windows-restricted-profile-support)
4948
- [Offline Policy Checking](#offline-policy-checking)
50-
- [Event recording](#event-recording)
5149
- [Conformance](#conformance)
5250
- [Implementation History](#implementation-history)
5351
- [Drawbacks](#drawbacks)
@@ -976,13 +974,6 @@ or combined for a more aggressive rollout:
976974

977975
Each step in the rollout could be overridden with a flag (e.g. force the admission plugin to step N)
978976

979-
### Custom Profiles
980-
981-
Allow custom profile levels to be statically configured. E.g.
982-
`--extra-pod-security-levels=host-network`. Custom profiles are ignored by the built-in admission
983-
plugin, and must be handled completely by a 3rd party webhook (including the dry-run implementation,
984-
if desired).
985-
986977
### Custom Warning Messages
987978

988979
An optional `pod-security.kubernetes.io/warn-message` annotation can be used to return a custom
@@ -1018,10 +1009,6 @@ We could provide a standalone tool that is capable of checking the policies agai
10181009
or through stdin. It should be capable of evaluating `AdmissionReview` resources, but also pod and
10191010
templated pod resources. This could be useful in CI/CD pipelines and tests.
10201011

1021-
### Event recording
1022-
1023-
Allow recording an event in response to a pod creation attempt that exceeds a given level.
1024-
10251012
### Conformance
10261013

10271014
As this feature progresses towards GA, we should think more about how it interacts with conformance.

0 commit comments

Comments
 (0)