Applications with very high protection requirements SHOULD use their own Kubernetes clusters or dedicated nodes that are not available for other applications.
This requirement must be implemented organizationally. OpenShift supports implementation and enforcement reproducibly via multi-cluster management (Red Hat Advanced Cluster Management for Kubernetes) and the use of labels (see APP.4.4.A14).
Applications with very high protection requirements SHOULD use their own Kubernetes clusters or dedicated nodes that are not available for other applications.