For the complete documentation index, see llms.txt.

Procedural

Disallowing privileged pods
Using Policy Controller to prevent running privileged pods
Disallowing run as root user
Using Policy Controller to prevent running pods as root
Maximum container image age
Maximum container image age with Policy Controller
Disallowing unsafe sysctls
Use Policy Controller to limit pods to safe sysctls
Verify signed Chainguard Containers
Using Policy Controller to verify signed Chainguard Containers
How to install Sigstore Policy Controller
Install the Sigstore Policy Controller into a Kubernetes cluster
How to keyless sign a container image with Sigstore
Use Cosign and GitHub Actions to keyless sign a Django container image