Also available as:
PDF

Restricting User-Controlled Kubernetes Pods