add Kyverno and Falco security test workloads

2026-08-14 22:08:52 -04:00
parent 2bd22db276
commit 2506b61ae0
11 changed files with 204 additions and 2 deletions
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: blocked-root
+  namespace: security-baseline
+spec:
+  restartPolicy: Never
+  containers:
+    - name: app
+      image: docker.io/library/busybox:1.36
+      command: ["sleep", "3600"]
+      securityContext:
+        runAsNonRoot: false
+        runAsUser: 0
+      resources:
+        limits:
+          cpu: 100m
+          memory: 64Mi