Skip to content

Commit 26f72a7

Browse files
committed
improvement psa document
Signed-off-by: Ugur <[email protected]>
1 parent 5db30bd commit 26f72a7

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

content/en/docs/concepts/security/pod-security-admission.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -125,6 +125,14 @@ current policy level:
125125
- Valid updates to `.spec.activeDeadlineSeconds`
126126
- Valid updates to `.spec.tolerations`
127127

128+
## Metrics
129+
You can look at the following Prometheus metrics exposed by kube-apiserver.
130+
131+
- `pod_security_errors_total`: metric contains the number of errors preventing normal evaluation. Non-fatal errors may result in the latest restricted profile being used for evaluation.
132+
- `pod_security_evaluations_total`: metric contains the number of policy evaluations that occurred, not counting ignored or exempt requests.
133+
during exporting.
134+
- `pod_security_exemptions_total`: metric contains the number of exempt requests, not counting ignored or out of scope requests.
135+
128136
## {{% heading "whatsnext" %}}
129137

130138
- [Pod Security Standards](/docs/concepts/security/pod-security-standards)

0 commit comments

Comments
 (0)