Aren't they going away?
When Kubernetes 1.11 was released in 2018, it was revealed that PSPs will likely never go General Availability (GA). This revelation was based on feedback that PSPs were difficult to use and the issues were systemic from their design. The discussion that came out of this revelation focused on three potential solutions:
- Fix PSPs/reimplement a new standard: These two options are bundled together because it's believed "fixing" PSPs will result in a standard that breaks backward-compatibility, resulting in a new policy system. Another option that's been floated is to port OpenShift's SCC implementation upstream.
- Remove PSPs: An argument has been made that this should be implementation-specific and so up to the implementer. Since PSPs are implemented using an admission controller, the argument is that this can be left to third parties.
- Provide a "basic" implementation: This is a hybrid approach where the upstream...