These are the situations when node labels play a crucial role. They are important enough that Kuberenetes advises adding well-known labels to your nodes

Magalix simplifies the question about policy such as “Where do you install it?”, “How to run it?”, “Where to run it?” etc.

By default, containers run with certain Linux capabilities. Adding additional capabilities can be quite dangerous

you must take the same careful measures with your container workloads. Allowing child processes with more privileges than their parent process

Kubernetes allows you to set which user you’d like to run as. In combination with understanding the users available in your container

Most pods and containers don’t require privileged access to your Kubernetes nodes. Allowing this setting leaves you at risk for potential exploitation.

How to run containers with unnecessary privileges by creating elevated permissions for your team, run containers to help safeguard your Kubernetes cluster

Magalix OPA SaaS offered a unified and declarative way of defining policies and you can audit and see the violation in the UI format.

OPA is used for intercepting the request and ensure resources follow policies