Files
CKS-Lessons/lab/workload-hardening-starter.yaml
2026-08-23 15:29:06 +06:00

23 lines
422 B
YAML

apiVersion: v1
kind: Namespace
metadata:
name: cks-workload
---
apiVersion: v1
kind: Pod
metadata:
name: inventory
namespace: cks-workload
labels:
app: inventory
spec:
containers:
- name: inventory
image: busybox:1.37
command: ["sh", "-c", "id; sleep 3600"]
securityContext:
runAsUser: 0
allowPrivilegeEscalation: true
capabilities:
add: ["NET_ADMIN"]