17 lines
393 B
YAML
17 lines
393 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: strict-supplementalgroups-policy
|
|
spec:
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 3000
|
|
supplementalGroups: [4000]
|
|
supplementalGroupsPolicy: Strict
|
|
containers:
|
|
- name: ctr
|
|
image: registry.k8s.io/e2e-test-images/agnhost:2.45
|
|
command: [ "sh", "-c", "sleep 1h" ]
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|