(Preview) Pod Security Policy

[mathieu-benoit]

Need to be positioned in comparison of OPA+AzurePolicy first, what's the orientation from K8S here?

• https://docs.microsoft.com/en-us/azure/aks/use-pod-security-policies
• Non-root user containers https://kubernetes.io/blog/2018/07/18/11-ways-not-to-get-hacked/#8-run-containers-as-a-non-root-user
• https://medium.com/@mccode/understanding-how-uid-and-gid-work-in-docker-containers-c37a01d01cf
• https://medium.com/faun/kubernetes-pod-security-101-15fe8cda829e
• https://blog.aquasec.com/kubernetes-security-pod-escape-log-mounts
• https://github.com/kevingbb/demo-aks-psp
• http://zigmax.net/aks-pod-security-policy-psp/

[mathieu-benoit]

https://github.com/mathieu-benoit/myakscluster/issues/11 instead