[kube-system]

And where the complexity comes in is where you need to comply with PCI and NIST 800-63 at the same time.