

Workload Configuration

Namespace Separation

RBAC

Admission Control

Pod Specification Enforcement

Trusted Image Repositories

Deployment Settings and Best Practices

Network Policy

Secrets Management

Affinity

Node Affinity

Anti-Affinity

Pod Disruption Budgets

Resource Control

LimitRanges

Quotas