apiVersion: v1
kind: Pod
metadata:
  name: bad-pod-1
  namespace: staging-ns
spec:
  containers:
  - name: busybox
    image: busybox
    args:
    - sleep
    - 1d
    securityContext:
      seccompProfile:
        type: Unconfined
      runAsNonRoot: true
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL