kubernetes/staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.21/fail/capabilities_baseline2.yaml

apiVersion: v1
kind: Pod
metadata:
  name: capabilities_baseline2
spec:
  containers:
  - image: registry.k8s.io/pause
    name: container1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        add:
        - chown
  initContainers:
  - image: registry.k8s.io/pause
    name: initcontainer1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities: {}
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault