Alternatives to PSPs
If not PSPs, then what? That really depends on a cluster's use case. There have been attempts to implement the full PodSecurityPolicy enforcement specification in OPA, which will be discussed in more detail in the next chapter. Several other projects have attempted to implement PSPs, if not the exact spec as the PodSecurityPolicy object. Given how fluid the space is, this chapter isn't going to enumerate all of the projects that are attempting to do this.
In May 2020, the authentication special interest group (sig-auth) published the pod security standards document to make it easier for different implementations of security policies to standardize on vocabulary and nomenclature. The standards were published on the Kubernetes website (https://kubernetes.io/docs/concepts/security/pod-security-standards/).
Be wary of implementing this logic on your own in your own admission controller as a validating webhook. Just as with any security implementation...
