Documentation
README
agentic-workflows-blueprint.workflow.implementing-pod-security-admission-controller
Goal
Implement Kubernetes Pod Security Admission (PSA) with controlled policy rollout (audit, warn, enforce) to raise workload security posture without destabilizing operations.
Scope
- Applies to: namespace-level Pod Security Standard enforcement and cluster-level PSA defaults.
- Does not cover: custom policy engines for rules beyond PSA baseline/restricted semantics.
Triggers
- "Enable Pod Security Admission"
- "Migrate from PodSecurityPolicy to PSA"
- "Enforce baseline/restricted policies per namespace"
- "Audit pod security violations before enforcement"
Inputs
This is the opening of the README. Read the full README on GitHub.