Kubernetes

Security configuration guidance for Kubernetes resources managed with Pulumi.

Documentation

Article	Path
Review Kubernetes AppArmor protection	`pulumi/kubernetes/missing_app_armor_config`
Pulumi Kubernetes PodSecurityPolicy permits privileged execution	`pulumi/kubernetes/psp_set_to_privileged`

Apply a suitable AppArmor profile on supported Linux nodes.

Do not permit privileged execution for ordinary workloads through PodSecurityPolicy.