This blog describes how to properly deploy an Oracle Container Engine for Kubernetes (OKE) cluster using the native pod networking configuration in a tenancy with a split application and network compartment model that conforms to the Center for Internet Security (CIS) reference architecture and OCI's secure landing zone.