Skip to content

Commit bf75860

Browse files
authored
Merge pull request #41814 from ugur99/ugur-develop
List metrics that relate to Pod security admission
2 parents 3726556 + b773649 commit bf75860

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

content/en/docs/concepts/security/pod-security-admission.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -125,6 +125,17 @@ current policy level:
125125
- Valid updates to `.spec.activeDeadlineSeconds`
126126
- Valid updates to `.spec.tolerations`
127127

128+
## Metrics
129+
130+
Here are the Prometheus metrics exposed by kube-apiserver:
131+
132+
- `pod_security_errors_total`: This metric indicates the number of errors preventing normal evaluation.
133+
Non-fatal errors may result in the latest restricted profile being used for evaluation.
134+
- `pod_security_evaluations_total`: This metric indicates the number of policy evaluations that have occurred,
135+
not counting ignored or exempt requests during exporting.
136+
- `pod_security_exemptions_total`: This metric indicates the number of exempt requests, not counting ignored
137+
or out of scope requests.
138+
128139
## {{% heading "whatsnext" %}}
129140

130141
- [Pod Security Standards](/docs/concepts/security/pod-security-standards)

0 commit comments

Comments
 (0)