Which label should be added to the Namespace to block any privileged Pods from being...

KubernetesPod Security Admission (PSA)enforcesPod Security Standardsby applying labels on Namespaces.

Exact extract (Kubernetes Docs – Pod Security Admission):

“You can label a namespace with pod-security.kubernetes.io/enforce: baseline to enforce the Baseline policy.”

Thebaselineprofile explicitly disallowsprivileged podsand other unsafe features.

Why others are wrong:

A & D: These labels do not exist in Kubernetes.

B: Setting privileged: true would allow privileged pods, not block them.