curriculum icon indicating copy to clipboard operation
curriculum copied to clipboard

Published 20 hours ago • verified publisher icon cncf

Remove PSP from CKS?

Open rwxrob opened this issue 2 years ago • 4 comments

After reading that PSP is deprecated and will be removed in 1.25 I'm left wondering why PSP is still listed under the CKS curriculum.

  • Is this so that we maintain the ability to support older installations?

  • At what point (if ever) will PSP be removed?

  • Will the graduated OPA Gatekeeper project take its place officially?

Related:

rwxrob avatar Aug 30 '21 18:08 rwxrob

On this note It would seem logical to remove PSP at this point, but I'd say that ideally the exam should stick with the in-tree replacement (Pod Security Admission).

The challenge with including other projects (e.g. gatekeeper) is that there's a number of open source and commercial options for admission control (On the open source side Kyverno, jsPolicy, Kubewarden, k-rail and others) so it would seem difficult to choose just one of those to be included in the exam.

raesene avatar Feb 16 '22 10:02 raesene

@raesene, I agree. However, Another way to do it is to check for the results, regardless of the solution. Disconnected exams would be an issue unless all alternatives are available.

walidshaari avatar Mar 08 '22 07:03 walidshaari

I am going to take the CKS next month. Looks like the PSP is still in the latest curriculum even PSP has been deprecated from K8s website. https://github.com/cncf/curriculum/blob/master/CKS_Curriculum_%20v1.24.pdf

Question: how can I get the PSP doc during the test?

zsustar avatar Oct 29 '22 11:10 zsustar

I am going to take the CKS next month. Looks like the PSP is still in the latest curriculum even PSP has been deprecated from K8s website. https://github.com/cncf/curriculum/blob/master/CKS_Curriculum_%20v1.24.pdf

Question: how can I get the PSP doc during the test?

You can always go back several versions in the K8s docs by selecting the "Versions" drop-down menu in the top-right corner of the docs or using the correct domain in the URL, for example:

The current, as of this comment version (1.25), PSP page is: https://kubernetes.io/docs/concepts/security/pod-security-policy/

The 1.24 version of the PSP page is: https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/

ChristopherHanson avatar Oct 29 '22 23:10 ChristopherHanson