mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
22 lines
429 B
YAML
22 lines
429 B
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: csc-demo-unprivileged
|
|
labels:
|
|
app.type: prod
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: psp
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: psp
|
|
spec:
|
|
containers:
|
|
- name: sec-ctx-unprivileged
|
|
image: nginxinc/nginx-unprivileged
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|