8 LEVELS
Admission Policy Bouncer
You are the admission controller. Pods arrive at the door with their security specs — swipe right to admit, swipe left to deny, based on the active policy. Eight levels covering privileged containers, host namespaces, non-root enforcement, capabilities, image registries, resource limits, privilege escalation, and the full PSA restricted profile.
YOU'LL LEARN:
- Identify privileged containers and understand why they are dangerous
- Recognize host namespace misuse (hostPID, hostIPC, hostNetwork)
- Apply non-root user enforcement via runAsNonRoot and runAsUser
- +5 more