Create cluster-admin role Share host process ID namespace Share host IPC namespace Share host network namespace Allow privilege escalation Run as root Automount service account token Run with privileged access Run with privilege escalation Run with NET_RAW capability Run with SYS_ADMIN capability Run with access to the host network Run with access to the host IPC namespace Run with access to the host PID namespace Run with access to the host filesystem Disable AppArmor Disable Seccomp Disable PodSecurityPolicy Use CNI that does not support Network Policies Do not assign a Network Policy Do not select all pods in a namespace with a network policy Set seccomp profile to unconfined Set AppArmor profile to unconfined Run in privileged mode Run with privilege escalation