Namespaces like 'default', 'kube-system' or 'kube-public' should not be used

Namespaces like 'default', 'kube-system' or 'kube-public' should not be used

Namespaces like 'default', 'kube-system' or 'kube-public' should not be used

Image Pull Policy of the container must be defined and set to Always

Images should be specified together with their digests to ensure integrity

Containers should be configured with an AppArmor profile to enforce fine-grained access control over low-level system resources

Each namespace should have a LimitRange policy associated to ensure that resource allocations of Pods, Containers and PersistentVolumeClaims do not exceed the defined boundaries

Each namespace should have a ResourceQuota policy associated to limit the total amount of resources Pods, Containers and PersistentVolumeClaims can consume

Container should not use secrets as environment variables