Privileged container

A container run with most or all kernel capabilities and without the usual restrictions, effectively giving it host-level power. There are legitimate uses — some node agents genuinely need it — and there is a very long tail of workloads granted it once to unblock something and never revisited. It is the first thing an admission policy should be looking for, because it turns an application compromise into a node compromise.