Skip to content

Commit

Permalink
Update runtime.md
Browse files Browse the repository at this point in the history
  • Loading branch information
jicowan authored Jun 3, 2020
1 parent d5ffec9 commit 21afb02
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion content/security/docs/runtime.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Before using seccomp, consider whether adding/removing Linux capabilities gives
### See whether you can accomplish your aims by using Pod Security Policies (PSPs)
Pod Security Policies offer a lot of different ways to improve your security posture without introducing undue complexity. Explore the options available in PSPs before venturing into building seccomp and Apparmor profiles.
!!! warning
With the future propects of PSPs in doubt, you may want to look at implementing these controls using Pod security contexts or OPA.
With the future propects of PSPs in doubt, you may want to look at implementing these controls using Pod security contexts or OPA/Gatekeeper. A collection of Gatekeeper constraints and constraint templates for implementing policies commonly found in PSPs can be pulled from the [Gatekeeper](https://github.com/open-policy-agent/gatekeeper/tree/master/library/pod-security-policy) repository on GitHub.

## Additional Resources
+ [7 things you should know before you start](https://itnext.io/seccomp-in-kubernetes-part-i-7-things-you-should-know-before-you-even-start-97502ad6b6d6)
Expand Down

0 comments on commit 21afb02

Please sign in to comment.