Problem:

Goal:

Why is it important?

Use cases:

1. <case>

Acceptance criteria:

1. <criteria>

Dependencies (External/Internal):

Design Artifacts:

Exploration:

Note:

OpenShift Docs: https://docs.openshift.com/container-platform/4.9/sandboxed_containers/understanding-sandboxed-containers.html

apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:

• name: DefaultPodSecurity
  configuration:
  apiVersion: pod-security.admission.config.k8s.io/v1alpha1
  kind: PodSecurityConfiguration
  defaults:
  enforce: "baseline"
  enforce-version: "latest"
  audit: "restricted"
  audit-version: "latest"
  warn: "restricted"
  warn-version: "latest"
  exemptions:
  usernames: []
  runtimeClassNames: []
  namespaces: [kube-system]

CRD

There is a CRD - kataConfig as well as runtimeClassName ("kata') which will be present.
This is a cluster wide resource.

Example pod yaml

https://github.com/bpradipt/kata-demos/blob/main/webserver/web.yaml

runtimeClassName:

https://github.com/bpradipt/kata-demos/blob/main/webserver/web.yaml#L22