From Pod Security Policies to Pod Security Standards – a Migration Guide

This guide explains how to migrate Kubernetes environments from deprecated Pod Security Policies (PSP) to Pod Security Admission (PSA) with Pod Security Standards (PSS), detailing onboarding and migration paths, the use of warn/audit/enforce modes, and practical commands to safely apply policies without disrupting workloads. It highlights operational constraints in managed clusters, nuances like image-level user settings potentially bypassing admission checks, and cleanup of completed workloads, and offers recommendations for namespace labeling, permission reviews, and optional use of external admission controllers (e.g., Wiz) to enforce and monitor policy compliance.