DenyHostNamespace is a Validator that denies sharing the host namespaces.

DenyHostPathVolumes is a Validator that denies usage of HostPath volumes.

DenyHostPorts is a Validator that denies usage of HostPorts.

DenyNonCoreVolumeTypes is a Validator that denies usage of non-core volume types.

DenyPrivilegedContainers is a Validator that denies privileged containers.

DenyPrivilegeEscalation is a Validator that denies privilege escalation.

DenyRootGroups is a Validator that denies running with a root primary or supplementary GID.

DenyRunAsRoot is a Validator that denies running as root users.

DenyUnsafeAppArmor is a Validator that denies overriding or disabling the default AppArmor profile.

DenyUnsafeCapabilities is a Validator that denies adding capabilities beyond the default set.

DenyUnsafeProcMount is a Validator that denies unmasked proc mount.

DenyUnsafeSeccomp is a Validator that denies usage of non-default Seccomp profile.

DenyUnsafeSELinux is a Validator that denies setting custom SELinux options.

DenyUnsafeSysctls is a Validator that denies usage of unsafe sysctls.

Validator is an interface for validator.