instruction: Create a Dockerfile for Node.js with production best practices
output: ```dockerfile
  from policy instantiation allows for a common understanding and
  consistent language of policies across clusters, independent of the underlying enforcement
  mechanism.As mechanisms mature, they will be defined below on a per-policy basis. The methods of enforcement
  of individual policies are not defined here.Pod Security Admission ControllerPrivileged namespaceBaseline namespaceRestricted namespaceAlternativesNote: This section links to third party projects that provide functionality required by Kubernetes. The Kubernetes project authors aren't responsible for these projects, which are listed alphabetically. To add a project to this list, read the content guide before submitting a change. More information.Other alternatives for enforcing policies are being developed in the Kubernetes ecosystem, such as:KubewardenKyvernoOPA GatekeeperPod OS fieldKubernetes lets you use nodes that run either Linux or Windows. You can mix both kinds of
  node in one cluster.
  Windows in Kubernetes has some limitations and differentiators
  ```