Improve the security of the USB ports on your nodes
To control which USB devices may be attached to cluster nodes, you can install the Red Hat Enterprise Linux (RHEL) usbguard extension on a machine config pool. The extension is added through a MachineConfig object, which the Machine Config Operator rolls out to the selected nodes.