mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-02-21 17:03:08 -05:00
24 lines
467 B
YAML
24 lines
467 B
YAML
|
|
apiVersion: v1
|
||
|
|
kind: Pod
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
run: target
|
||
|
|
name: target
|
||
|
|
spec:
|
||
|
|
securityContext:
|
||
|
|
seccompProfile:
|
||
|
|
type: Localhost
|
||
|
|
localhostProfile: dummy.json
|
||
|
|
containers:
|
||
|
|
- image: busybox
|
||
|
|
name: target
|
||
|
|
command: ["/bin/sh", "-c", "sleep 100"]
|
||
|
|
securityContext:
|
||
|
|
runAsUser: 1000
|
||
|
|
runAsGroup: 1000
|
||
|
|
runAsNonRoot: true
|
||
|
|
allowPrivilegeEscalation: false
|
||
|
|
capabilities:
|
||
|
|
drop:
|
||
|
|
- "ALL"
|