Use PSP to Constrain Privileged Pods in Container Service

This lab uses Alibaba Cloud's container cluster service. The lab describes the process of creating, managing and binding PodSecurityPolicy resources in Kubernetes clusters. PodSecurityPolicy (PSP) is an important tool to achieve security verification for Kubernetes deploying pods, which can effectively restrict the security of behavior when running the application.