AWS eks documentation change
Summary
Updated Kyverno documentation links and blog URL for PSP migration guidance.
Security assessment
The changes only update URLs to external Kyverno resources. There is no modification to security policies, vulnerability disclosures, or security recommendations. The updates maintain existing security documentation but don't address any specific security flaws.
Diff
diff --git a/eks/latest/best-practices/pod-security.md b/eks/latest/best-practices/pod-security.md index 7b1bbb583..e0043822d 100644 --- a//eks/latest/best-practices/pod-security.md +++ b//eks/latest/best-practices/pod-security.md @@ -93 +93 @@ Both the PAC and PSS solutions can coexist with PSP; they can be used in cluster -Kyverno, one of the PAC solutions outlined below, has specific guidance outlined in a [blog post](https://kyverno.io/blog/2023/05/24/podsecuritypolicy-migration-with-kyverno/) when migrating from PSPs to its solution including analogous policies, feature comparisons, and a migration procedure. Additional information and guidance on migration to Kyverno with respect to Pod Security Admission (PSA) has been published on the AWS blog [here](https://aws.amazon.com/blogs/containers/managing-pod-security-on-amazon-eks-with-kyverno/). +Kyverno, one of the PAC solutions outlined below, has specific guidance outlined in a [blog post](https://kyverno.io/blog/2023/05/24/psp-migration/) when migrating from PSPs to its solution including analogous policies, feature comparisons, and a migration procedure. Additional information and guidance on migration to Kyverno with respect to Pod Security Admission (PSA) has been published on the AWS blog [here](https://aws.amazon.com/blogs/containers/managing-pod-security-on-amazon-eks-with-kyverno/). @@ -313 +313 @@ Pros: - * Can generate complementary policies and Kubernetes resources (solution dependent - From pod policies, Kyverno can [auto-gen](https://kyverno.io/docs/writing-policies/autogen/) policies for higher-level controllers, such as Deployments. Kyverno can also generate additional Kubernetes resources _"`when a new resource is created or when the source is updated`"_ by using [Generate Rules](https://kyverno.io/docs/writing-policies/generate/).) + * Can generate complementary policies and Kubernetes resources (solution dependent - From pod policies, Kyverno can [auto-gen](https://kyverno.io/docs/policy-types/cluster-policy/autogen/) policies for higher-level controllers, such as Deployments. Kyverno can also generate additional Kubernetes resources _"`when a new resource is created or when the source is updated`"_ by using [Generate Rules](https://kyverno.io/docs/policy-types/cluster-policy/generate/).)