19 lines
371 B
YAML
19 lines
371 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: blocked-root
|
|
namespace: security-baseline
|
|
spec:
|
|
restartPolicy: Never
|
|
containers:
|
|
- name: app
|
|
image: docker.io/library/busybox:1.36
|
|
command: ["sleep", "3600"]
|
|
securityContext:
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 64Mi
|