github.com/inspektor-gadget/inspektor-gadget@v0.28.1/docs/examples/seccomp/confined.yaml (about)

     1  apiVersion: v1
     2  kind: Pod
     3  metadata:
     4    name: hello-python
     5    namespace: seccomp-demo
     6    labels:
     7      app: hello-python
     8  spec:
     9    securityContext:
    10      seccompProfile:
    11        type: Localhost
    12        localhostProfile: operator/gadget/hello-python.json
    13    containers:
    14    - name: hello-python
    15      image: tiangolo/uwsgi-nginx-flask:latest
    16      imagePullPolicy: Always
    17      ports:
    18      - containerPort: 80
    19      volumeMounts:
    20      - name: app-script
    21        mountPath: /app/
    22    volumes:
    23    - name: app-script
    24      configMap:
    25        name: app-script