CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node

CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node

CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise