Ensure only allowed volume types are mounted for all Kubernetes workloads

Some volume types mount the host file system paths to the pod or container, thus increasing the chance of escaping the container to access the host.

Review the volumes that are mounted using the spec.volumes object in the resource YAML file. For more information on what values are allowed, see the Kubernetes documentation.

References:
https://kubernetes.io/docs/concepts/security/pod-security-standards/