- To define how data volumes are provisioned
- To control access to the Kubernetes API
- To manage network policies for pods
- To monitor application logs