apiVersion: v1
kind: Pod
metadata:
  name: root-pod-from-trusted-registry
  # namespace: default
spec:
  containers:
  - name: kyverno
    image: ghcr.io/kyverno/test-verify-image:unsigned