The parks namespace enforces the baseline Pod Security level. A developer’s Pod sets privileged: true on a container SecurityContext. What should the developer expect?
Select an answer to reveal the explanation.
Short Explanation
Baseline is the city parks rulebook that bans the wildest container powers. privileged: true is exactly that kind of power move, so admission waves the Pod off. Fix the SecurityContext instead of hoping the node will soften the policy.
Full Explanation
Pod Security admission evaluates Pod specs against Privileged, Baseline, or Restricted profiles for a namespace. The baseline profile disallows dangerous fields such as privileged containers, host namespaces, and certain capabilities. When enforcement mode is active, noncompliant Pods are rejected at admission. Application developers must align SecurityContext settings with the namespace policy.