apiVersion: v1
kind: Namespace
metadata:
  name: cks-workload
---
apiVersion: v1
kind: Pod
metadata:
  name: inventory
  namespace: cks-workload
  labels:
    app: inventory
spec:
  containers:
    - name: inventory
      image: busybox:1.37
      command: ["sh", "-c", "id; sleep 3600"]
      securityContext:
        runAsUser: 0
        allowPrivilegeEscalation: true
        capabilities:
          add: ["NET_ADMIN"]