mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
19 lines
354 B
YAML
19 lines
354 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: badpod01
|
|
namespace: default
|
|
spec:
|
|
containers:
|
|
- name: container01
|
|
image: nginx:1.1.9
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
capabilities:
|
|
add:
|
|
- SYS_ADMIN
|
|
drop:
|
|
- ALL
|