You can block the use of hostPath volumes, preventing containers from accessing the cluster node file system.
Fill out the configuration file
...
## policy bans mounting host directories (hostPath volumes)
disallowHostPath:
enabled: true
## list of namespaces where the hostPath ban policy will apply
namespace:
- brix365
...
where:
- disallowHostPath.enabled: Set to true to enable the policy. The false value disables it.
- disallowHostPath.namespace: Specify the namespaces to which the policy will apply.
After configuring the security policy, install the kyverno-policies chart as described in Step 3 of Phase 2 in Install Kyverno.