---
name: containers-ts-app-04-psp
title: Why do my pods fail to deploy after applying a pod security policy?
description: '[Virtual Private Cloud] [Classic infrastructure]'
last-updated: 2026-02-18
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/containers?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Why do my pods fail to deploy after applying a pod security policy?
{: #ts-app-psp}
{: support}

[Virtual Private Cloud]{: tag-vpc} [Classic infrastructure]{: tag-classic-inf}


After creating a pod or running `kubectl get events` to check on a pod deployment, you see an error message similar to the following example.
{: tsSymptoms}

```sh
unable to validate against any pod security policy
```
{: screen}


The `PodSecurityPolicy` admission controller checks the authorization of the user or service account that tried to create the pod.
{: tsCauses}

If no pod security policy supports the user or service account, then the `PodSecurityPolicy` admission controller prevents the pods from being created.

If you deleted one of the pod security policy resources for IBM cluster management, you might experience similar issues.


Make sure that the user or service account is authorized by a pod security policy. You might need to modify an existing policy.
{: tsResolve}

If you deleted an IBM cluster management resource, refresh the Kubernetes master to restore it.

1. [Log in to your account. If applicable, target the appropriate resource group. Set the context for your cluster.](https://cloud.ibm.com/docs/containers?topic=containers-access_cluster&format=markdown)
2. Refresh the Kubernetes master to restore it.

    ```sh
    ibmcloud ks cluster master refresh
    ```
    {: pre}