Files
kubernetes-security-baselin…/test-workloads/blocked/default-namespace-pod.yaml
T
swaphb 2506b61ae0
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m5s
add Kyverno and Falco security test workloads
2026-08-14 22:08:52 -04:00

21 lines
418 B
YAML

apiVersion: v1
kind: Pod
metadata:
name: blocked-default-namespace
namespace: default
spec:
restartPolicy: Never
securityContext:
runAsNonRoot: true
containers:
- name: app
image: docker.io/library/busybox:1.36
command: ["sleep", "3600"]
securityContext:
runAsNonRoot: true
runAsUser: 1000
resources:
limits:
cpu: 100m
memory: 64Mi