21 lines
438 B
YAML
21 lines
438 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: blocked-unapproved-registry
|
|
namespace: security-baseline
|
|
spec:
|
|
restartPolicy: Never
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
containers:
|
|
- name: app
|
|
image: registry.example.com/security-test:1.0
|
|
command: ["sleep", "3600"]
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 64Mi
|