apiVersion: kyverno.io/v2alpha1
kind: ValidatingPolicy
metadata:
  name: disallow-privilege-escalation
status: {}