Restricted profile

The Restricted policy is aimed at enforcing current Pod hardening best practices, at the expense of some compatibility. It is targeted at operators and developers of security-critical applications, as well as lower-trust users.

Click on each of the controls to know more about them.

Disallow Capabilities Strict

Disallow Privilege Escalation

Require Run As Non-root

Require Run As Non-root User

Restrict Seccomp Strict

Restrict Volume Types